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Abstract 

This paper describes a theory of inheritance theories. We present 
an original theory of inheritance in nonmonotonic hierarchies. The 
structures on which this theory is based delineate a framework that 
subsumes most inheritance theories in the literature, providing a new 
foundation for inheritance. 

• Our path-based theory is sound and complete w.r.t. a direct 
model-theoretic semantics. 

• Both the credulous and the skeptical conclusions of this theory 
are polynomial-time computable. 

• We prove that true skeptical inheritance is not contained in the 
language of path-based inheritance. 

Because our techniques are modular w.r.t. the definition of specificity, 
they generalize to provide a unified framework for a broad class of in¬ 
heritance theories. By describing multiple inheritance theories in the 
same “language” of credulous extensions, we make principled compar¬ 
isons rather than the ad-hoc examination of specific examples makes 
up most of the comparative inheritance work. 
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Figure 1: A simple iaheritance hierarchy. 

1 Introduction 

Inheritance reasoning is ubiquitous. Hierarchies provide a concise encoding of much of our com- 
monsense knowledge. They appear in various guises in the literature of artificial intelligence, but 
also throughout the various arts and sciences. Open nearly any textbook, and some hierarchy is 
likely to appear. 

Reeisoning with inheritance hierarchies is of particular interest to the artificial intelligence com¬ 
munity because hierarchies are not only useful and native to human reasoning, but also simple and 
often tractable. The simplicity of the “inheritance problem” makes it attractive as a topic that can 
be considered in its entirety; its tractability makes it practical for the implementation of knowledge 
representation systems. 

In this paper, we present several equivalent formulations of inheritance reasoning. Each ap¬ 
proach may be useful in a particular context; by demonstrating their equivalence, we show that 
the most appropriate definition may be chosen. The techniques that we develop here generalize to 
a broad class of existing systems, providing a unified foundation for inheritance theory and a basis 
for comparative analysis, as weU as extending previous restilts. 

We begin, in section 2, by providing an intuitive description of what we intend by inheritance 
reasoning. We view inheritance hierarchies as representing primitive assertions in the knowledge 
base of some reasoning agent, and the inheritance problem as that of determining the agent’s 
derived beliefs. The work in the remainder of this paper builds on this foundation. 

In section 3, we give a formal path-based definition of inheritance. A path-based inheritance 
theory gives rules describing the admissible conclusions of a hierarchy. The theory presented here 
combines rules concerning the transitivity of primitive assertions with an ambiguity-resolution 
criterion to be invoked when two paths conflict. We describe the transitivity component by the 
notion of reachability^ the resolution criterion is captured by specificity. 

In section 4, we describe a model-theoretic semantics for inheritance hierarchies. A hierarchy 
defines a space of possible world-states—credulous extensions—or unambiguous interpretations. 
Specificity induces a preference relation over these world-states. In the resulting preferential se¬ 
mantics, each world-state has a classical model-theoretic interpretation, and the interpretation of 
an inheritance hierarchy is the set of models of preferred world-states. We demonstrate that the 
path-based theory of section 3 is sound and complete with respect to this model theory. 

The model-theoretic semantics that we describe in section 4 differs from previous semantics for 
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inheritance hierarchies by separating the model preference criterion—specificity—from the semantic 
space. The language of credulous extensions is a common basis for the semantics of inheritance 
systems. By varying the definition of specificity—selecting different sets of preferred extensions— 
we obtain model-theoretic semantics for diverse inheritance theories. We present an alternate 
specificity criterion in section 8. ' 

Section 5 describes a tractable algorithm for computing the inferences supported by an in¬ 
heritance hierarchy. This is the first tractable theory for credulous inheritance—reasoning about 
what might be. Previous tractable inheritance theories have been limited to skeptical reasoning— 
computing what must be—or to an otherwise limited subset of the credulous conclusions. 

In section 6, we present a reason maintenance labeling scheme for inheritance reasoners. We 
label each node of the hierarchy with a propositional formula corresponding to the conditions 
under which the associated inference— a is- or is-not-a x —holds. These labels keep track of all of 
the possible (or preferred) interpretations of an inheritance hierarchy simultaneously, allowing us 
to draw contingent conclusions and reason about the interrelatedness of inferences. 

In section 7, we use the reason maintenance labeling to define and investigate the problem of 
ideally skeptical inheritance—computing the intersection of credulous extensions. Where credulous 
inheritance is analogous to propositional satisfiability, the ideally skeptical conclusions of a hierarchy 
are its theorems, or valid conclusions. We demonstrate that previous “skeptical” theories are not 
ideally skeptical, and prove that no purely path-based inheritance definition can compute the ideally 
skeptical conclusions of an inheritance hierarchy. 

Section 8 and 9 examine several previous theories of inheritance. Section 8 replicates the work 
in the body of this paper for off-path inheritance. In section 9, we make more general comparisons 
with existing inheritance research and position our work in that larger context. 

2 Hierarchies as Belief Spaces 

In this section, we present an intuitive interpretation of inheritance hierarchies. In later sections, 
we give formal definitions of these ideas; here, we hope to motivate that more formal work by 
answering the question of “what we mean” when we draw an inheritance hierarchy. Regrettably, 
most previous theories of inheritance omit such a statement of intent, and the lack of such an 
intuitive semantics has been one of the criticisms levelled against the entire inheritance endeavor 
(c./. Woods [42], Brachman [7], Bacchus [4], etc.). 

Our interpretation of inheritance hierarchies is relatively simple. Each arc in an inheritance 
hierarchy—such as figure 1—represents an atomic assertion in the knowledge base of some rea¬ 
soning agent—what this agent “believes,” if you wUl.^ Since this paper deals exclusively with 
defeasible inheritance, it is possible that an arc in the hierarchy—an atomic belief—is mistaken 
(e.g., lumberjacks might not, in fact, be Real™ men); however, in this agent’s world-model, each 
of these atomic assertions holds.^ 

Reachability, or transitivity-by-default, poses a second constraint on world-models. This con¬ 
straint arises when we try to apply an atomic assertion—Real^^ men are hearty eaters —to some 
other class or individual— lumberjacks, or Joe the Reaf-^ man. The fact that Joe may be a picky 

’We put the word “believes” in quotation marks to emphasize that we are not proposing that edges of an inheritance 
hierarchy follow any realistic epistemic ontology; rather, we find the term belief, when removed from that formal 
context, to be suggestive of the kind of tentative assertion about the world that we wish to describe. 

^The exception to this is the case in which the knowledge base contains both the atomic assertion that a (defeasibly) 
is an X, and the atomic assertion that a (defeasibly) is not an x. Here, there are (at least) two possibilities: the 
reasoner’s beliefs may be ambiguous; or they may be (locally) inconsistent. We opt for the ambiguity interpretation 
(see below). 
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Figure 2: Is a platypus a mamma]? 
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Figure 3: A b/ue whale is an aquatic creature. 

eater dpes not defeat either the assertion that Joe is a Real^^ man, or the assertion that ReaF^ 
men are generally hearty eaters; it merely makes Joe an atypical ReaJ^^ man. In the absence 
of conflicting information, the world-model of our reasoner is constrained so that subclasses and 
individuals are typical of their superclasses. 

Finally, we have the third kind of defeasibility in inheritance hierarchies: the defeasibility 
of ambiguous conclusions. Unlike the defeasibility of atomic assertions or that of derived (but 
xmcontested) conclusions, ambiguity’s defeasibility arises when there are two explicit and conflicting 
arguments. In figure 2, the derived conclusion that platypuses are mammais is directly opposed 
by the (equally legitimate) conclusion that platypuses are not mammals. In this case, even the 
reasoning agent is assumed to be aware of the defeasibility. Indeed, we interpret such a hierarchy 
as s^serting that the world must be in such a state that either platypuses are mammals, or they are 
not; but this reasoner does not know which. That is, the atomic assertions hold; and the assertions 
in some maximal consistent subset of their transitive closures hold; but there may be several such 
subsets, corresponding to several possible states of the world. 

The situation here is not as hopeless as it may sound. First, the reasoner may prefer one of these 
possible world-states. For example, in figure 3, there are derived paths asserting that blue whales 
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are aquatic creatures (by virtue of their being whales, which are explicitly aquatic) and that blue 
whales axe not aquatic (by virtue of their being mammals). If we were reasoning about whales, this 
conflict would be easily resolved: the assertion that whales are aquatic is explicit, and therefore 
blocks the derived assertion (through mammals) that whales are not aquatic. In the case of blue 
whales, we can resolve this ambiguity by resorting to arguments about specificity. Because blue 
whales are mammals only by virtue of being whales, information about whales is more specific to 
blue whales than information about mammals, and the reasoner prefers to beheve that the actual 
world-state is one in which blue whales are aquatic. We discuss the notion of specificity, and the 
selection of preferred world-states, in greater detail below. 

Second, even in truly ambiguous cases—such as T 2 —the inheritance hierarchy may contain 
contingent information. In this case, the reasoner caimot determine whether the actual world 
corresponds to the possible world-state in which platypuses are mammals, or that in which they 
are not. However, the reasoner can assert that if the actual world-state is such that platypuses 
are mammals, then it follows that platypuses produce milk. In this fashion, the hierarchy supports 
conclusions relative to a partictdar possible world-state. 

3 A Path-Based Definition 

A path-based theory of inheritance is one which defines the admissible conclusions of an inheritance 
hierarchy to be precisely the set of conclusions supported by admissible paths in the hierarchy. For 
example, the reason that lumberjacks are believed to be hearty eaters (according to figure 1) is 
that there is a path from lumberjack through man to hearty eater in Fi. Like proof 

theories, path-based inheritance theories give almost algorithmic characterizations of the process 
by which conclusions are derived. In some cases, they lead to tractable inference procedures. In 
general, however, path-based inheritance theories lack model-theoretic semantics. Previous path- 
based theories of inheritance include the work of Touretzky, Horty, and Thomason [18, 17, 19, 38, 
39, 40, 41], SandewaU [32], and Geffher and Verma [14]. 

In this section, we present a path-based theory of inheritance. In section 4 we describe a model- 
theoretic semantics for which this path-based theory is sound and complete. In section 5, we present 
an 0(n‘*) algorithm for computing the conclusions of an inheritance hierarchy supported by this 
path-based definition. 

Our path-based inheritance theory is similar to that of Touretzky [39, 40], save that it is upwards 
reasoning. Upwards inheritance reasons about the properties of some particular object, rather than 
about the set of objects possessing some particular property. Some ramifications of upwards vs. 
downwards inheritance are discussed by Touretzky et al. [41]; the computational advantages of 
upwards inheritance are described by Levesque and Sehnan [33] (see also section 5, below). 

The approach that we describe in this section is also credtdous: it allows a conclusion whenever 
that conclusion is consistent with some (preferred) interpretation of the hierarchy; or, whenever it 
is a plausible conclusion of the reasoner’s explicit beliefs. Thus, in a hierarchy like r 2 , we expect 
to draw both the conclusion that a platypus is-a mammal, and that a platypus is-not-a mammal. 
In section 6, we discuss the problem of contingent reasoning —determining the assumptions that 
rmderhe credulous conclusions. For example, we conclude that a platypus is-a milk-producer when¬ 
ever we asstune that it is-a mammal. In section 7, we discuss skeptical reasoning, in which only 
the certain—uncontested—conclusions of the hierarchy are considered. 
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Figiire 4: A hierarchy is ambiguous w.r.t. a focus node. 

3.1 The Framework 

An inheritance hierarchy F = {Vr,Er} is a directed acyclic graph with positive and negative 
edges, intended to denote “is-a” and “is-not-a” respectively. We write a positive edge from o to a; 
as a - X, and a negative edge a • -^x. We call a sequence of positive edges a • sj • • • s„ • a: (n > 0),^ a 
positive path, and a sequence of positive edges followed by a single negative edge a • si •••$„•-'X 
(n > 0 ) a negative path. 

A path, or argument, a • si • • • s„ • (-i)a: supports the inference “a is (not) an a;.” We use 
the notation a-^x (resp., 0743 ;) to stand for this inference, or conclusion, independently of the path 
through which it is derived. One inference—e.g., a^x —may have many supporting arguments— 

Ct * • • • 5^ * 215 ct * dCt 

Given an inheritance hierairchy F = (Vr, Er) with nodes a,x e Vr, we say that x is reachable 
from a (alternately, a-reachable) if there is some path a • si • • ■ s„ • (-i)a: in Ep. If the final edge is 
positive —Sn • ®—we say that aj is positively reachable from a; similarly, • -ix and negatively 
a-reachable. By extension, we say that an edge s • (-i)x is reachable from a if s is positively 
a-reachable, and a path St, ■ • • s„ • (-i)x is reachable from a if every edge on that path is a-reachable. 
We say that a hierarchy F is a-connected if every node in Vp and every edge in Ep is reachable 
from a. When reasoning about an inheritance hierarchy w.r.t. a particular node, we call that node 
the focus node. 

Ambiguity arises when two paths conflict. Formally, an inheritance hierarchy F is ambiguous 
w.r.t. a node a if there is some node aj € Vp such that both a • si • • ■ • a: and a-ti • ■-tm ■->x are in 

Ep. In this case, we say that the ambiguity is at x. Ambiguity is always relative to a focus node: 
for example, F 4 is unambiguous w.r.t. a, but ambiguous w.r.t. b (at e). 

Our definition of ambiguity differs from the conventional one. First, we introduce the notion of 
ambiguity w.r.t. a focus node. To previous theories, the hierarchy in figrure 4 is simply ambiguous: 
w.r.t. a or 6 or c or d or e. Second, our definition of ambiguity is stronger than that in the literature. 
For example, by our definition, F 3 is ambiguous w.r.t. whale. This reflects the fact that there are 
paths whale • aquatic creature and whale • mammal ■ -^aquatic creature in Ep,. We shall see in 
the next section that specificity resolves this ambiguity and the conclusions derivable from F 3 are 
unambiguous. Previous inheritance theories do not distinguish between resolvable ambiguities— 


^ The notation a-si -sa abbreviates the set of edges {a-si,si -^2}; Si •••Sn abbreviates {s, -82,*2 •*», ••••Sn-i '^n}- 
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such as that in figure 3—and unambiguous hierarchies such as figure 1. Hierarchies with ambiguous 
conclusion sets—Uke figure 2—we term truly ambiguous w.r.t. focus nodes. 

An inheritance hierarchy F supports a path a • si ■ ■ • s„ • (-i)a:, written F |> a • • (-i)*, 

if the corresponding sequence of edges a • si • • • s„ • (-i)* is in Ep and it is admissible according to 
specificity. We discuss admissibility in the next section. F supports an inference a^x (resp., 
074 *) if it supports some corresponding path. For simphcity, we also allow the degenerate path a, 
with the corresponding inference a—^a. 

3.2 Specificity 

A specificity criterion, or preemption strategy, makes admissibility choices among certain com¬ 
peting paths. The idea of specificity dates from Touretzky’s inferential distance [39, 40]. Since 
then, many definitions of specificity have appeared in the literature, but all operate on the same 
underlying principle: more specific information is more directly relevant. For example, in figure 3, 
information about whales is more specific to blue whales than information about mammals, so we 
can infer that blue whales are aquatic. 

The framework that we have presented so far is compatible with many of the existing definitions 
of specificity. In this section, we present an original definition. Our specificity criterion closely 
resembles Touretzky’s original notion of specificity [39, 40], but which is computable in polynomial 
time (see section 5). In section 8, we describe an alternate definition of specificity—one resembling 
that of Sandewall [32] and Horty et al. [18,19]—and show how to integrate that definition into this 
framework. 

An edge v • (“i)* is admissible in F w.r.t. a if there is some path a ■ si ••• Sn ■ v, {n > 0), in 
Er, and 

1. None of the edges of a • si • • • s„ • u is redundant in F w.r.t. o, 

2. Each of the edges of a • Si • • • • u is admissible in F w.r.t. a, and 

3. No intermediate node a,si, ...«„ is a preemptor of v ■ (-i)a: w.r.t. a. 

Intuitively, an edge is admissible if there is a non-redundant admissible path leading to it that 
contains no preempting intermediaries. 

A path is admissible in F w.r.t. a if every edge in that path is admissible. 

A node s is a preemptor^ of v • a; (resp., v • ->x) w.r.t. a if s • -la: G Er (resp., s • x E Ep). 
For example, the positive edge from whale to aquatic preempts the negative edge from mammal to 
aquatic, w.r.t. both whale and blue whale. 

The difficulties caused by redimdant links were noted by Touretzky [39, 40]: Consider F 2 aug¬ 
mented by an additional edge firom blue whale to manamal. This edge would be redundant: blue 
whales are typically mammals even without the explicit assertion. However, if the edge from blue 
whale to mammal were not excluded, there would be an admissible path blue whale • mammal • 
-laquatic creature —no intermediate node is a preemptor of mammal ■ -^aquatic creature. Clearly, 
this is not the intended meanmg here (or, indeed, in any network of this form, since the “whale” 
node is always more specific than the “mammal” node (w.r.t. “blue whales”)). 

An edge b-w is redundant in F w.r.t. focus node a if there is some positive path fe-ti E 

Er, m > 1, for which 

^Perhaps “potential preemptor” would be a better term: if « is not on any (admissible, non-redimdant, positive) 
path from a to v, then s effectively has no bearing on the admissibility of v ■ (-')x. This is because preemptors are 
checked only in condition 3 of the definition of admissibility. In [35, 37, 36], we gave a stronger—^and incorrect— 
condition here. 
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1. Each of the edges of b ■ ti is admissible in F w.r.t. a, 

2. There are no c and i such that c • -itj is admissible in T w.r.t. a; there is no c such that c • -<w 
is admissible in T w.r.t. a.® 


Redimdant edges may themselves be admissible. For example, an edge from blue whale to mammal 
in figure 3 would be admissible w.r.t. blue whale. However, redimdant edges may not contribute to 
the admissibility of other edges: mammal ■ -^aquatic creature is not admissible w.r.t. blue whale, 
in spite of the admissible path blue whale • mammal. Conditions 2 and 3 in the definition of 
admissibility hold for the path blue whale • mammal ■ aquatic creature, but condition 1 is violated. 

The path-based definition of supports yields the following conclusions on the hierarchy r 2 in 
figure 2: 


r2 |> platypus—^platypus 

r2 |> platypus^fuiry animal 

r2 |> platypus—^egg-layer 

r2 |> platypus—*mammal(* * +) 

r2 |> platypus-/imammal(* + *) 

r2 |> platypus—imilk-producer 

r2 l> egg-layei^egg-layer 

r2 1 > egg-layei-/*mammal 


r2 |> furry animal-^furry animal 
r2 |> furry animal-^mammal 
r2 |> furry animal-^milk-producer 

r2 |> mammal—>mammal 
r2 |> mammal—* milk-producer 

T2 |> milk-producer-^milk-producer 


In this case, specificity cannot resolve the ambiguity w.r.t. platypus at mammal, and r 2 supports 
both of the assertions marked (***): that platypuses are mammals, and that they are not mammals. 
In such a case—when a hierarchy supports conflicting paths—we say that the hierarchy is truly 
ambiguous w.r.t. platypuses. 

The conclusion-set of Ts is 


Fa 

l> 

blue whale—*blue whale 

Fa 

l> 

whalewhale 

Fa 

1 > 

blue whale—>whale 

Fa 

l> 

whale—>mammal 

Fa 

l> 

blue whale—^mammal 

Fa 

l> 

whale—* aquatic creature 

Fa 

l> 

blue whale—^aquatic creature 

Fa 

l> 

mammal—^mammal 

Fa 

l> 

aquatic creature—* aquatic creature 

Fa 

l> 

mammal-/*aquatic creature 


In this case, specificity resolves the ambiguities w.r.t. blue whale and whale at aquatic creature. 
As a result. 


Fa 1 ^ blue whale-/*aquatic creature and Fa whale-/-^aquatic creature 


The same set of conclusions would result if we added a redundant edge from blue whale to mammal. 


4 Mo del-theoretic Semantics 

The path-based inheritance theory of the previous section is a sort of “proof theory” for inheritance: 
given a hierarchy, it describes the rules by which conclusions may be drawn. In this section, we 
present a model-theoretic approach to understanding the meaning of an inheritance hierarchy. 
Rather than the admissible conclusions, this section speaks of the possible world-states—credulous 
extensions—that are “models” satisfying the constraints imposed by the hierarchy. In essence, 

^Although the definitions of admissibility and redundancy are mutually dependent, they are not circular. Because 
the hierarchy is acyclic, it can be ordered topologically, and the definition of an admissible edge v ■ {-')x depends only 
on the redundancy of edges with endpoints strictly topologically earlier than i. 
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this section makes rigorous the informal characterization of the meaning of inheritance hierarchies 
described in section 2. 

Previous theories of inheritance semantics have been translational: a hierarchy is expressed as 
a set of statements in some particular (nonmonotonic) logic, and the semantics of the logic provide 
semantics for the hierarchy. For example, McCarthy [27], Haugh [16], and Krishnaprasad, Kifer, 
and Warren [22, 23] translate inheritance hierarchies into particular circumscriptive theories [26]; 
Etherington and Reiter [11, 12, 13] treat hierarchies as theories of Reiter’s default logic [31]; Przy- 
musinska and GeHbnd [15, 30] use Moore’s autoepistemic logic [29] as a target language; Bacchus [4] 
bases his translation on a probabilistic logic; and Boutilier [6] uses a conditional logic. 

While the semantics provided by most of these theories are as satisfying as the semantics 
of the underlying logics, they are less semantics of inheritance than theories of how inheritance 
relates to (or can be expressed in) those logics. In contrast, the theory that we present here is 
a theory of direct semantics for inheritance hierarchies. Hierarchies define a space of possible 
interpretations, or models. Specificity—drawn from the topological properties of the hierarchy—is 
used as a preference criterion over these models. The meaning of the hierarchy is the set of its 
maximally preferred models. The result is a preferential semantics like those of Bossu and Siegel [5], 
Etherington [10, 12], and Shoham [34] for more general nonmonotonic logics. 

Further, virtually every previous—translational or path-based—approach to inheritance se¬ 
mantics contains a fixed ambiguity-resolving preemption strategy.® Although the selection of an 
appropriate preemption strategy is stiQ a subject for debate in the inheritance literature (see, e.g., 
Touretzky et aZ.’s discussion of the “Clash of Intrdtions” [41]), existing systems of inheritance as¬ 
sume some single, fixed strategy. Preemption strategies are variously embedded in the mechanics 
of path construction, the translation procedure, or the tmderlying nonmonotonic logic. This makes 
it extraordinarily diflRcult to compare rmderlying preemption strategies. As a result, most so-caUed 
“comparisons of inheritance theories” are in reality ad hoc comparisons of system performances on 
selected examples. 

In contrast, our semantics is modular. We reduce a hierarchy to its possible interpretations, 
or credulous extensions. Our semantics for individual extensions is independent of the specificity 
criterion used to select among extensions. The credulous extension semantics generalize to arbitrary 
upwards inheritance theories, providing a common base for their semantics. By combining with 
different selection strategies, these extensions—possible world-states—give sound and complete 
model-theoretic semantics for alternate inheritance theories. This means we can compare the 
ambiguity-resolving heuristics of various inheritance theories directly and theoretically, rather than 
by resorting to ad hoc analysis of specific examples. We make use of this generahty to explore 
off-path inheritance in section 8, below. 

4.1 Semantics for Credulous Extensions 

We focus first on the problem of providing a model-theoretic semantics for a single, tmambiguous 
“credulous extension.” In general, we believe that a translational approach to inheritance semantics 
is undesirable. Such an approach trades the topological information inherent in a hierarchy for the 
semantics for an existing logic. In particular, translational approaches provide less-than-satisfactory 
means for dealing with ambiguities. Often, they merely adopt the ambiguity-resolving strategy of 
the target logic, which may not be appropriate for inheritance hierarchies. Where they do provide 
additional, expHcit ambiguity resolution, it is fixed as a part of the translation procedure. 

The approach to semantics for credulous extensions that we present here is translational. How¬ 
ever, it is not subject to these criticisms of translational approaches precisely because it provides 

®The exception to this is Haugh [16]; see the discussion of his work in section 9, below. 
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translations only for credulous extensions— unambiguous subhierarchies—and not for a hierarchy as 
a whole. Thus, it does not rely on the translation procedure or the underlying logic for ambiguity- 
resolution strategies. All ambiguity-resolution is done in the (non-translational) process of selecting 
some preferred subset of the credulous extensions; once the set of credrdous extensions—or possible 
interpretations—for a hierarchy has been established, the semantics for any single extension are 
straightforward. In the next section, we discuss the problem of deriving the appropriate preferences 
over credulous extensions. 

A credulous extension corresponds to a possible world-state—one in the space of world-states 
defined by inheritance ambiguity. Formally, a credulous extension of an inheritance hierarchy 
r with respect to a node a is a maximal unambiguous o-connected subhierarchy of F with respect 
to a: if is a credulous extension of F w.r.t. a, then for every edge u-(-i)a;€Er — Exr, adding 
V • (-i)® to Xo would make X^ ambiguous or not a-coimected. An example of several credrdous 
extensions—and some non-extensions—for the hierarchy of figure 2 is given in figure 5. 

Several previous inheritance theories include a related but distinct concept. Touretzky [40] 
based his inheritance theory on a construct that he called a grounded expansion. Sandewall [32] 
used the term extension to refer to structures much like Touretzky’s grormded expansions. However, 
our credulous extensions differ from Touretzky’s grounded expansions and SandewaU’s extensions— 
we will call them both expansions —in two significant ways. First, their expansions are supersets 
of the hierarchy—the original hierarchy plus some additional, “disambiguating” information. For 
example, in F2, one expansion adds the additional edge platypus ■ mammal, while another adds 
platypus • -nmammal. In our terms, their expansions are themselves ambiguous hierarchies. Second, 
their expansions are of the hierarchy as a whole, while ours axe w.r.t. a particrdar focus node. 
To Touretzky and Sandewall, F2 simply has two expansions, period. In our theory, F2 has two 
credulous extensions w.r.t. platypus, but only one w.r.t. egg-layer or mammal. In both of these 
ways, our credulous extensions correspond more closely to the extension of a predicate or of a 
default logic theory than to past definitions of the expansion of an inheritance hierarchy. 

Because a credrdous extension is tmambiguous, every edge is admissible. Thus, instead of 

|> a-^x —there is an admissible positive path fi'om a to x —we need merely check that there is 
some positive path from a to a: (resp., a-/*x and negative path). We make use of this to provide a 
straightforward model-theoretic semantics for a single extension: 

For every vertex x G we create a unique propositional variable x. X„ is the theory (in 
the propositional calculus) given by 

a /\{xDy) /\ (xDr^yf 

x-y^E-^r x—iy^E^r 

Since X^ is unambiguous, X^ is consistent and has a model. 

In other words, we translate the edges of X^ into material implications, allowing inference chains 
exactly when there are paths in the credrdous extension. It would be idee if all of inheritance seman¬ 
tics were this easy. However, Thomason et al. demonstrate that the translation into propositional 
logic does not work even in the simpler case of strict (non-defeasible) inheritance [38], where local 
inconsistency in a hierarchy wotdd lead to a globally inconsistent theory. In the general defeasible 
case, the propositional theory corresponding to an ambiguous inheritance hierarchy would be in¬ 
consistent. The only reason that the translation into a propositional theory works here is that it is 
the translation of a credulous extension: an unambiguous subhieraxchy. Ambiguity resolution must 
therefore be applied in selecting the credidous extensions that are the preferred interpretations of 
the original hierarchy. 


^A, D , and ~ should be read as propositional conjunction, material implication, and negation, respectively). 
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a. Credulous extension of 12 w.r.t. 
platypus 



■(un^ 

a^imai 


b. Credulous extension of r 2 w.r.t. 
platypus 



e/' 


|fuiii:,-pvCclo.C€j^ c. Not platypus-connected 


'pb.-f^3 


fna/iArvi<xP 





tr- 


d. Can add mammal ■ milk producer e. Ambiguous w.r.t. platypus 

Figure 5: Some extensions and non-extensions of r 2 . 
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Once we have chosen the preferred extensions—as we discuss in the next section—this trans¬ 
lational semantics provides the desired result. The following theorem states that support—the 
existence of an admissible path—is equivalent to entailment in the propositional theory. Thus the 
path-based definition of support for credulous extensions is sound and complete w.r.t. the model- 
theoretic semantics defined here. 

Theorem 1 (Soundness and Completeness for Credulous Extensions) 

Let r be an inheritance hierarchy, with a,x G Vp • Let be a credulous extension of 
r w.r.t. a, and let be the propositional theory corresponding to X^. The following 
are equivalent: 

1. Xo|>a-^a: (resp., a-f^x). 

2. X is positively a-reachable in (resp., negatively a-reachable). 

3. Xl^x (resp., r^x). 

4- X^ 1= X (resp., ^x). 

This follows directly from the fact that every path in a credulous extension is admissible. FuU 
proofs of aU theorems may be found in appendix A. 

4.2 Selecting Preferred Extensions 

Given a single credulous extension, we have seen how to derive a model-theoretic interpretation of 
that extension. In fact, the semantics of the previous section would work any time we began with an 
unambiguous inheritance hierarchy (which would have only a single credulous extension w.r.t. any 
focus node). But inheritance hierarchies are generally ambiguous. As a result, T may have several 
extensions w.r.t. a given focus node, a. Some of these extensions may be more intuitive than others. 
In this section, we describe a means of selecting the preferred (more intuitive) extensions of F w.r.t. 
a. The semantics of F are then simply the sets of interpretations for the preferred extensions of F 
w.r.t. the nodes of Vp- 

In inheritance hierarchies, specificity gives us a means of ruling out unintuitive interpretations. 
Thus, we use the definition of admissibility according to specificity, from section 3.2, above, to 
define the preference relation over credulous extensions. We say that one extension is preferred to 
another if it is “more consistent” with the constraints of specificity: 

Let X^ and be two credulous extensions of an inheritance hierarchy F w.r.t. focus node a. 
Then specificity prefers X^ to (X^ ■< Yj) if there are some nodes v and x such that 

1. X^ and Yg agree on all edges whose endpoints topologically precede a;,® 

2. The edge v • (-i)® is inadmissible in F w.r.t. a, and 

3. Y^ contains that inadmissible edge: 3si, ...s„, Y^ |> a • si • • • • v • (->)*, and 

4. X^ does not include it: X|[ [2^- o • si • • • • t; • (-i)®. (Note that X^ |> a • Si • • • s„, by 1.) 

If a credulous extension is minimal under this preorder—i.e. no other extension is preferred to 
it—we call it a preferred extension of the hierarchy: 


Pm/(F,a) = {Xr|VYr,Yrz<X^} 
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o-OpcLb'c. 

Cjrtattune:, 



a-OjjioJnc. 

CJCtOctturE, 




meummcxA 


vi\rwxle. 


Figure 6: Specificity prefers to 

whale 


Y ^ 

* btuciohoic^ 


where and are credulous extensions of F w.r.t. a. 

Figiure 6 shows the two credulous extensions of the hierarchy in figure 3. Specificity prefers 

^biue whale ^blue whale" 

1 - ^blue whale ^blue whale ag^ee up to aquatic creature 

2 . mammal • -^aquatic creature is inadmissible in Fa w.r.t. blue whale 
^blue ydiale whale • whale • mammal ■ -laquatic creature, and 

4. Xy^g blue whale ■ whale ■ mammal ■ -laquatic creature. 

Theorem 2 is a soundness and completeness theorem for the path-based definition of section 3 
w.r.t. the complete model-theoretic semantics defined here: selecting preferred extensions and pro¬ 
viding translational semantics for those preferred extensions. In section 8, we demonstrate that 
other inheritance theories, with other definitions of specificity, can be described in these terms. 
This enables us to use the definitions of this section and section 3 to give similar soundness and 
completeness results for several existing inheriteince theories. 

Theorem 2 (Soundness and Completeness) 

Let F be an inheritance hierarchy, with a,x E Yp, and let Vref{T, a)be the set of 
preferred extensions of F w.r.t. a. Then F |> a-^x iff there is some preferred extension 
X^ G Vref{T, o) snch that X^ |= x (resp., a^x and 

The complete model-theoretic interpretation of Fa in figure 2, is therefore the set of mod¬ 
els of preferred extensions. In this case, specificity cannot disambiguate the hierarchy, and both 
extensions are preferred. The propositional theories w.r.t. platypus are 

platypus A {platypus D furry animal) A (furry animal D mammal) 

A (mammal D milk-producer) A (platypus D egg-layer) 

®That is, if every topological sort places s and t before x, then xj and ¥„ agree on edges s • (-i)!. 

®Since r|>a— whenever some preferred extension (of F w.r.t. a) entaUs x, |>is analogous to propositional 
satisfiability. This is the essence of credulous inheritance: a conclusion is admissible if there is some (preferred) 
possible world-state supporting it. In section 7, we discuss the problem of skeptical inheritance—“valid” conclusions— 
entailed by all preferred possible world-states. In terms of the framework of this section, these are the conclusions 
supported by all preferred credulous extensions. 
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entailing the conclusions 
platypus 


furry animal 


mammal 


milk-producer 


egg-layer 


platypus A {platypus D furry animal) A (platypus D egg-layer) 

A (egg-layer D '^mammal) 

which entails 

platypus furry animal ’'^mammal egg-layer 

The preferential semantics allows the conclusion that platypus is-a 2; if a: is entailed by the models 
of either of these theories, so playtpus is-a 


platypus 


furry animal 


mammal 


milk-producer 


egg-layer 


and platypus is-not-a mammal. The hierarchy is unambiguous w.r.t. its other nodes. The conclu¬ 
sions w.r.t. furry animal are furry animal, mammal, and milk-producer, since is 

furry animal A (furry animal D mammal) A (mammal D milk-producer) 


k is 

mammal 


mammal A (mammal D milk-producer) 


which entails mammal and milk-producer, and N^,^.producer milk-producer. is 

egg-layer A (egg-layer D ~mammal) 
entailing furry animal and '^mammal. 

In contrast, specificity does provide a preference over the credulous extensions of the hierarchy 
in figure 3 w.r.t. blue whale and whale. The interpretation of Ts w.r.t. blue whale is therefore the 

interpretation of the single preferred extension, whale’ from figure 6: 

blue whale A (blue whide D wh^e) A (whale D mammal) 

A (whale D aquatic creature) 


This entails the conclusions (w.r.t. blue whale) 


blue whale 


whale 


mammal 


aquatic creature 


Similarly, specificity prefers the extension w.r.t. whale in which whales are aquatic, with the cor¬ 
responding propositional theory 

whaJe A (whale D mammal) A (whale D aquatic creature) 

and the hiercurchy entails the inferences that a whale is-a whale, mammal, and aquatic creature. 
The hierarchy is unambiguous w.r.t. mammals and aquatic creatures, so there is only one credulous 
extension w.r.t. each of these: 

mammal A (mammal D '^aquatic creature) 

and a mammal is-a mammal, but is-not-a aquatic creature; and 

aquatic creature 


so an aquatic creature is-a aquatic creature. 
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blueu>\nalc 


Figure 7: whale specificity on Fa w.r.t. blue whale. 

5 Computing Specificity 

The preference criterion approach to ambiguity resolution is satisfying from a semantic perspective, 
but it does not tell us much about how to derive the preferred extensions of a hierarchy. In this 
section, we give a polynomied-time—C>(n®)—algorithm for computing the specificity extension 
of r w.r.t. a. This algorithm demonstrates that upwards inheritance is tractable for credulous 
(goal-directed) on-path reasoning. In section 7, we extend this result to include ideally skeptical 
reasoning; in section 8, we give a similar algorithm for off-path inheritance. 

There are several other computational theories of inheritance in the literature. Those of Horty 
et al. [18, 19] and Haugh [16] as well as the ambiguity-propagating algorithm of our [36, section 4] 
are “skeptical”—they attempt to compute only those conclusions that are unopposed. We discuss 
skeptical theories in section 7, below, where we show that none of these previous theories are 
ideally skeptical. Geffner and Verma [14] 'also offer an algorithm that is sound but incomplete for 
their inheritance theory. No previous path-based theory has been shown tractable for credulous 
inheritance. 

Etherington [12, p. 89] gives an algorithm for finding extensions of general default theories. 
Kautz and Selman [21, theorem 1] have adapted this algorithm to find a single (arbitrary) ex¬ 
tension of a disjunction-free ordered default theory. This class includes the inheritance theory 
of Etherington and Reiter [12, 13]. However, Kautz and Selman’s O(n^) algorithm finds only a 
single arbitrary extension of the hierarchy, and cannot be used to determine whether a particular 
conclusion is supported. Indeed, Kautz and Selman demonstrate that goal-directed reasoning— 
determining whether there is an extension supporting some particular conclusion—is, for ordered 
default theories, A/*'P-hard [21, theorem 3]. Similarly, they show that skeptical reasoning for the 
same class of theories is A/’T^-hard [21, theorem 7]. In [33, theorem 2], Levesque and Selman demon¬ 
strate that downward inheritance reasoning (as espoused, e.g., by Touretzky [39, 40]) is AfV-haid, 
whether skeptical or credulous, on- or off-path. 

Our algorithm is therefore the first sound and complete algorithm for credulous inheritance 
reasoning. It generates the specificity extension of F w.r.t. a. is a subhierarchy of F 
containing only and exactly the admissible edges of F w.r.t. a. For example, the specificity extension 
of the hierarchy in figure 3 w.r.t. blue whale is shown in figure 7. 

The following algorithm always yields a unique specificity extension for a hierarchy F w.r.t. 
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focus node a. 


COMPUTE-SPECIFICITY-EXTENSION (P, a) 


Let contain the a-reachable nodes of P, and no edges. 
12 := 0 

For each node » in in topological order 
Add edges v ■ (-i) ® irom P to 


; will be the specificity extension 
; o/P w.r.t. a. 

; R will hold the redundant edges o/P 
; w.r.t. a. 

; From a to ...: 

; Restore x-edges 


For each edge v ■ (-i) x in E^, in reverse topological order ; 
Let E* be E^ minus any nodes that are preemptors ; 
of V • (-i) aj (i.e. remove any edges into and out of 
preempting nodes) / 

If E* no longer contains a positive path from a to i; 

then remove the edge v • (-i) * from E^ ; 


Now weed out preempted x-edges: 
Remove potential preemptors 

Is V still positively a-reachable ? 

If not, it’s preempted 


For each remaining positive edge p ■ x 

If there is a positive path from p to » in E^ 
that goes through no negatively a-reachable nodes 
then move p ■ x fiom E^r to R 


; Check if it’s redundant 
; If so, 

; Remove the edge—temporarily 


Restore the redundant edges in R to E^r 


; Redundant edges are still admissible 


Return e£ 


Theorem 3 (Complexity of compute-specificity-extension) 

Constructing is 0{n^) 

The following theorem is essentially a proof of correctness for COMPUTE-SPECIFICITY- 
EXTENSION. It says that contains all and only those edges of P that axe admissible w.r.t. 
a. 


Theorem 4 (Correctness of COMPUTE-SPECIFICITY-EXTENSION) 

Lei r be an inheritance hierarchy, with a E Vp, and let be the specificity extension 
of r w.r.t. a. Then Ej;r = {u • (-i)a;|u • (-i)a; admissible in Tw.r.t. a} 

The subhierarchy of admissible (w.r.t. a) edges in P may stOl be ambiguous. For example, 
aU of the edges in a diamond ambiguity such as the platypus diamond of figure 2 are admissible; 
^platypus’ specificity extension of P2 w.r.t. platypus, is simply P2 and, like P2, has two credulous 
extensions w.r.t. platypus. However, the ambiguities that can be resolved by specificity have been: 
the credulous extensions of are precisely the preferred credtdous extensions of P w.r.t. a. 

Corollary 4.1 Let P be an inheritance hierarchy, with a £ Vp. Let Vref{T,a) 
be the set of preferred credulous extensions o/P w.r.t. a and let be the specificity 
extension of P w.r.t. a. Then G Vref{T,a) iffX^ is a credulous extension of 
w.r.t. a. 
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Corollary 4.2 Let F be an inheritance hierarchy, with a £ Vr- Let be the 
specificity extension of F w.r.t. a. Then F|>a— iff x is positively a-reachable in 
Ti^(resp., a-f^x and negatively a-reachable). 

This means that an inference a-^x is supported by F—alternately, a preferred credulous ex¬ 
tension of F w.r.t. a entails x- — iff x is positively a-reachable in Sq. Since verifying reachability 
is linear in the number of edges, it follows that computing the credulous conclusions of F is also 
tractable. 

Corollary 4.3 (Complexity of Credulous Inheritance) 

Deciding whether F |>a— is 0(n®) (resp., a-/*x). 

6 Reason Maintenance and Inheritance 

In this section, we define a reason maintenance system for inheritance hierarchies. A reason main¬ 
tenance system is a construction that keeps track of the assumptions or justifications supporting a 
particular conclusion; several systems of this type appear in the literature [8, 9, 24, 25, 28]. 

In the case of inheritance hierarchies, the reason maintenance system keeps track of the multiple 
credulous extensions of a hierarchy (w.r.t. each node), using a set of propositional labels for the 
nodes of that hierarchy. This function mimics the behavior of de Kleer’s assumption-based truth 
maintenance system (ATMS) [8]; when we introduced the labeling scheme in [35], we called it the 
ATMS-labeling of the hierarchy. 

The reason maintenance labehng keeps track of all of the possible interpretations—the credulous 
extensions—at once. We exploit this feature to draw contingent conclusions: that is, to determine 
what follows if we make a certain assumption. For example, in figure 2, we can conclude that 
if platypuses axe mammals, then they produce milk. In section 7, below, we use the labeling to 
examine the problem of skeptical inheritance—computing what conclusions hold in every credtdous 
extension. 

For each pair of nodes, a and x, in Vr we define two labels: the conditions under 

which a is an a:, and conditions rmder which a is not an X. I and ][ H may be 

thought of as operators on nodes returning boolean formulae. For example, we would expect that 
Ihearty would be [T] — lumberjacks are expected to be hearty eaters —while the 

negative label [[quiche-eaterj| ]]^ ^p^j^^^. would be [T] — lumberjacks normally don’t eat quiche. How¬ 
ever, ][a;]o isn’t always ~|»]]a: both the positive label Jquiche-eater|^^^^^ and the negative 

label IquicheeaterJ^g^j^ eater gives us no information about whether hearty eaters 

tend to eat quiche. 

In general, we might reason about whether a is an a: in some particular F as follows: 

Let C5>osr(a:) be the “positive children” of x in F—the nodes Pi £ Vp with positive 
edges p-x £ Ex' —and let Giegx{x) be the “negative children” of a; in F—n 6 Vr | 
n ■ -<x £ Ex. Suppose that, for aU p G (posx(x), a is not a p; i.e., F a-^p. Then 
F lf>a—^x, because there is no support for x. So 

~l[<posr(a:)la 3 ~I*la 

Here, we have introduced a notational shorthand: I^5>osr(®)lo reaUy means 
(Vpecposr(x) 1 [p1o)» where an empty disjunction is to be read as J.. 
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Figxire 8: The labeling of r2 w.r.t. platypus. 


On the other hand, if a is a p, for some p € (]josr(a;), but a is definitely not an n for 
any of ®’s negative children n, then a is also an x: x’s positive children provide it with 
a supporting argument, and there are no explicit counterarguments. That yields 

([(J)osr(a!)]^ A (~Ithegr(®)Ia) 3 

Finally, it could be that at least one of Cf>osp(x) is true, but at least one of Che^p(a:) 
is also true. In this case, x is ambiguous: it has some support, but there is also a 
cormterargument. If x is ambiguous, its value is tmconstrained. In some credulous 
extensions, we would expect |®]„ to be true, and in others it should be false. When 
this situation arises, x becomes a choice-point and we introduce x —the free variable 
corresponding to the node x —into the labeling scheme. The truth value assigned to x 
shouldn’t matter most of the time, but in this special circumstance—when I(3>cisr(a;)J^ 
and |(3»e3r(a:)]]^, so x is ambiguous—we want [[a:]o to vary freely with x. 

(Ia>o«r(a:)l^ A IO»e^r(®)]]^) D (fsK = ®) 

Conjoining these three constraints gives us the conditions under which a is an a;. The positive 
label for x w.r.t. a is given by: 

[[®la = [(I0'osr(a!)l^ A (~|[Che5r(a:)Io)) V (|[^o«r(*)lo A [[theflfr(a:)l^ A «)] 

whenever a: is not a leaf. 

In addition, we have laj^ = [T] — a is always an a —and V®, if a: a is a leaf of the hierarchy, 
1*1 a — [-*-]—trivially, t' a—^x. These rules for generating labels mimic the construction of paths— 
reachability—by concatenating the edges of the hierarchy. 

There is a similar labeling scheme for 1*1 the conditions under which F |> a-/*x: 

1. [[a]^ = [±]: a is never a non-a. 

2. If a: a is a leaf of F, = [±]: since x cannot be a-reachable, Tj^ay^x. 

3. For a generic node, a:, 

l[*la = ((~[0>o«r(*)la) A ItheiSfr(«)!«) V {![(3>osr(*)E A l[thesr(a!)l^ A 
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For example, the labeling of the platypus diamond of figure 2 w.r.t. platypus is shown in 
figure 8. In this hierarchy, = [mammal]. Although this label says very little— 

platypuses are mammals in those extensions in which they are mammals —the propagation of labels 
yields |milli:-producer|pj^^^py^ = [mammal]— platypuses are also milk-producers in precisely those 
extensions in which they are mammals. This is exactly the sort of contingent reasoning that we 
woidd expect our interpretation of inheritance hierarchies to capture. 

Theorem 5 demonstrates that these labels keep track of all of the credulous extensions of a 
hierarchy at once. In the following sections, we present several useful corollaries of this theorem. 

Theorem 5 (Correspondence Theorem) 

Let r be an inheritance hierarchy, with a,x G Fr- Then there is a correspondence 
between the set of credulous extensions of F w.r.t. a, and the truth-assignments to 
the free variables in the labels of F w.r.t. a, such that the truth-assignment assigns 
I®la — [T] iff the corresponding extension supports a—*x (resp., and a-/^x). 

The mapping from extensions of F w.r.t. a to truth-assignments assigns a variable £ [T] iff a is-a 
X in the extension; the inverse mapping creates an extension containing those edges q ■ s £ Er for 
which [[^]„ = = [T], and g ■ -is G Ep whenever = [T] and |sj„ = [±]. A proof of the 

Correspondence Theorem may be foimd in appendix A. 

It follows immediately that the labels of an inheritance hierarchy are computing reachability: 

Corollary 5.1 Let F be an inheritance hierarchy, with a,x £ Vp. Then |a:|o is 
satisfiable iff x is positively a-reachable in F. (resp., |[®]|^ and negatively a-reachable). 

Of course, reachability is not reaUy what we are interested in. F supports an inference if its 
conclusion is reachable by an admissible path, not just any path. That is, the labels are not taking 
into account specificity—the preemption of an argument by a more specific counterargument. 

Happily, we have a way of constructing the subhierarchy of admissible edges in F w.r.t. a —this 
is S„. It follows immediately from theorem ?? and coroUary 5.1 that satisfiability of the labels of 
Sq w.r.t. a corresponds to admissibility in F w.r.t. a, i.e. |> . 

Corollary 5.2 Let F be an inheritance hierarchy, with a,x £ Vr? let be the 

specificity extension of F w.r.t. a. Then |a:]a“ is satisfiable iff T \> a^x (resp., \x\a 
and a-f^x). 

This means that to take specificity into accoimt—to reason only about F’s preferred extensions w.r.t. 
a —we can simply apply COMPUTE-SPECIFICITY-EXTENSION to F, a and label the residting 
S^. Any contingent conclusions—or, as we shall see in the next section, skeptical conclusions—that 
we draw using the labels of w.r.t. a apply to F taking specificity into account. 

An alternative but more complex approach to labeling with specificity might be to integrate 
the specificity criterion directly into the labeling scheme. In this case, we would condition the 
acceptance of a node on its non-preempted children. Unfortunately, even for a relatively simple 
preemption scheme such as the one described in section 3.2, these labels are quite complicated. For 
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example, the “specificity label” for a—>-x is 
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On each line, the left-hand portion—|pE or |nE—is simply the old term (posr(a;) or Oieg^ix )— 
a:’s children—and the right-hand portion formalizes “and that child is not preempted.” For more 
complex preemption schemes, such as that described in section 8, the labels become stiU more 
complicated. 

Fortunately, we do not have to resort to embedding specificity in the labeling scheme. The speci¬ 
ficity extension of a hierarchy provides us with precisely the information we need—a subhierarchy 
containing only admissible edges—and simple reachabihty in the specificity extension is equivalent 
to reachability by an admissible path in the complete hierarchy. Thus, instead of using the more 
complex “specificity labels” on the full hierarchy, we can compute the specificity extension of the 
hierarchy and use the simpler labels defined in section 6, above. 

We can use this labeling in updating the hierarchy. Consider, for example, the hierarchy of 
figure 2. If we later discover that platypuses are mammals, the labeling automatically tells us that 
they are milk-producers as well (since Imfik-producerlpfg^j^jjg = [mammal], and now = 

[mammal] = [T]. In fact, we can incorporate various types of ambiguity resolving information— 
from domain-specific knowledge to updated befiefs—into this labeling simply by adding further 
constraints. 

The complexity of this extended labeling algorithm, including fiirther constraints, is unknown. 
Since it is a special case of boolean satisfiabihty, the problem may be A/’P-hard. However, for the 
limited case of determining that a label is falsifiable—i.e., that there is some credulous extension 
in which the corresponding inference does not hold—there is a polynomial algorithm due to Kautz 
and Sehnan [21]. In the next section, we explore the problem of skeptical inheritance: computing 
the intersection of credulous extensions. 


7 Skeptical Inheritance 

Up to this point, we have been discussing credulous inheritance—reasoning in which a conclusion 
that holds in some plausible (preferred) extension is acceptable. This type of reasoning is analogous 
to finding satisfiable sentences. In this section, we discuss skeptical inheritance: computing those 
inferences that hold in all plausible interpretations. These conclusions are the valid consequences 
of the hierarchy-what must foUow from the reasoners beliefs, no matter which possible world-state 
actually exists. 

The labeling scheme of section 6 provides a language for expressing these two types of inher¬ 
itance. We have seen that credulous inheritance permits a conclusion a-^x iff |a:E is satisfiable. 






Figure 9: Applying ambiguity blocking inheritance to Fs w.r.t. a yields 

Formally, ideally skeptical inheritance supports exactly those conclusions true in every (pre¬ 
ferred) credulous extension. It follows from theorem 5 that a isa x in every credulous extension 
of r w.r.t. a iff is valid. Similarly, intersecting preferred credulous extensions corresponds to 
taking the valid labels of S^. 

Corollary 5.3 Let F be an inheritance hierarchy, with a, a; G Ftj o,nd let be 
the specificity extension of F w.r.t. a. Then is valid (tautological) iff a-^x holds 

in every credulous extension of F w.r.t. a, and |a:lo is valid iff a-*x holds in every 
preferred credulous extension of F w.r.t. a (resp., and negatively a-reachable). 

CoroUeiry 5.3 tells us that |a:]o“ is valid iff a—>x holds in the intersection of F’s preferred 
credulous extensions (w.r.t. a). Determining this set of conclusions is exactly the problem of 
ideally skeptical inheritance. 

In the next sections, we present two path-based approaches to skeptical inheritance that have 
received some attention in the literature. We demonstrate that these approaches are not ideally 
skeptical: they do not compute exactly the always-true conclusions of a hierarchy. We show fur¬ 
ther that no path-based approach can be both sound and complete for ideally skeptical inheritance. 
The problem of ideally skeptical inheriteince—intersecting credulous extensions—lies outside the 
language of path-based inheritance theories. The difficulty lies in the fact that some conclusions 
may be true in every credulous extension, but supported by different paths in each. Any path- 
based theory must either accept one of these paths—and be unsound, since such a path is not in 
every extension—or reject all such paths—and with them the ideally skeptical conclusion—and be 
incomplete. 

7.1 Ambiguity Blocking Inheritance 

The first attempt at skeptical inheritance is due to Horty et al. [18, 19];^° Haugh [16] gives an 
equivalent circumscriptive definition. They argue that an ambiguous line of reasoning should not 

^“According to Horty (personal communication), a “skeptical” approach to inheritance is one which offers a unique, 
unambiguous set of conclusions for any inheritance hierarchy. This differs with our intuition that “skeptical” means 
“unwilling to beKeve uncertain conclusions.” In Horty’s view, computing the intersection of the credulous extensions 
is only one way to reason “skepticaUy.” 
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Figure 10: computes “parity.” 

be allowed to interfere with other potential conclusions. Because this approach discontinues a line of 
reasoning as soon as an ambiguity has been reached, Haugh calls it ambiguity blocking inheritance. 
Although Horty et ah, and Haugh describe a specific theory—including, e.g., a particular specificity 
criterion—ambiguity blocking inheritance potentially defines a general approach. We paraphrase 
ambiguity blocking inheritance here: 

Let initially be F. Starting from the focus node a, consider each node x in topological order. 

If r is truly ambiguous w.r.t. a at remove all edges into and out of x from B^. When 
the entire hierarchy has been scanned, B^ is truly unambiguous w.r.t. a. This is the ambiguity 
blocking skeptical extension of F; ambiguity blocking inheritance concludes that a network F 
admits a—exactly when B^ |> a • si • • • s„ • a (resp., a-/*x and a • sj • • • • -’x). 

While ambiguity blocking inheritance seems reasonable, it results in some anomalous conclu¬ 
sions. Consider, for example, figure 9. Ambiguity blocking inheritance on F with focus node a 
determines that e is ambiguous w.r.t. a, so it eliminates aU edges to and from e. In particular, 
it eliminates the edge e • -i/, making / imambiguous w.r.t. a: B^® |>a->/. This is certainly one 
possibility. But it is also possible that a-*e; and if a—>€, it is rmclear whether a-*f —that is, a 
might not be an /. It is certainly not safe to assume from the ambiguity at e that the path a-b-d- f 
is always true. But this is precisely what ambiguity blocking inheritance does. This anomaly was 
first noted by Horty et al. [18, 41]. 

A more severe anomaly follows from this first. Ambiguity blocking inheritance computes a kind 
of “parity” on the number of ambiguities in a path. According to ambigtuty blocking inheritance, 
the network in figure 10 is skeptical as to whether a is-a e or an i, but allows the conclusions that 
a is-a g and a j. Similarly, this net is skeptical about whether b ox f is-a j, but allows the paths 
from a and d to j. More than the first anomaly, this result calls into question the intuitiveness 
of ambiguity blocking iuheritance. In any case, ambigtuty blocking inheritance is unsotmd w.r.t. 
ideally skeptical inheritance: there are inferences a-^x such that B^ |>a—>a:, but |a:]o is falsifiable. 
Figures 9 and 10 both illustrate this unsoundness of ambiguity blocking inheritance. 


is truly ambiguous w.r.t. a at a: if F |> a—*x and F i> a-/*!. 
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Figure 11: 11^® results from ambiguity propagating inheritance. 

7.2 Ambiguity Propagating Inheritance 

Ambiguity propagating inheritance allows ambiguous lines of reasoning to proceed. An argu¬ 
ment thus cannot be certain tmless there are no counterarguments; in contrast, ambiguity blocking 
inheritance considers only unambiguous coimterarguments. Like ambiguity blocking inheritance, 
ambiguity propagation defines a family of algorithms. Haugh [16] gives a circumscriptive definition; 
in [36], we describe an 0(|Er|) algorithm. Again, we paraphrase: 

Starting &om the focus node a, consider each node a of F in topological order. If F is truly 
ambiguous w.r.t. a at a, rather than eliminating all edges to and &om a, retain a but mark it as 
ambiguous w.r.t. a. Although paths to and from a will not be included in the final result, they 
can still act as counterarguments during this processing and prevent other nodes from being 
unambiguous. is the a-connected subgraph of F with those edges a • {-')y G J5p such that 
neither a nor y is marked ambiguous w.r.t. a. 

For example, the cascading ambiguities of figures 9 and 10, which gave ambiguity blocking 
inheritemce diffictdty, present no problem for ambiguity propagating inheritance. Figure 11 shows 

n^®. 

is sound w.r.t. ideally skeptical inheritance: if 11^ |> a-^x, then is satisfiable. In fact, 
computes the subhierarchy of F containing exactly those edges of F that are in every (preferred) 
credulous extension of F w.r.t. a. However, H^ is incomplete: there are some inferences a-^x that 
are supported by every credulous extension of F w.r.t. a but have different supporting arguments in 
different extensions. These conclusions are not supported by n][. We demonstrate such a hierarchy 
in the next section. In these circumstances, we need to reason about inferences rather than paths. 

7.3 Ideally Skeptical Inheritance 

Consider the hierarchy in figure 12.^^ Every credulous extension w.r.t. seedless grape .vine supports 
the inference seedless grape vine-*plant, so ideally skeptical inheritance concludes that seedless 
grape vines are plants. Suppose, for example, that a seedless grape vine is a fruit plant; then it is a 
plant. Suppose that it is not a fruit plant; then it is unambiguously an arbor plant, and therefore 

Ginsberg has independently proposed a hierarchy with similar properties, in which Nixon is always politicaUy 
motivated. 
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a plant. In any state of the world, no matter how we resolve the ambiguities of the taxonomy, a 
seedless grape vine is a plant. This is reflected in the fact that [[pJantJ^^'.= [T]. 

K we wish to determine what is true in all possible worlds, we cannot avoid this kind of reasoning. 
There are facts which are true in all credulous extensions, but which have no justification in the 
intersection of those extensions. This is why we cannot generate an “ideally skeptical extension”— 
no particular set of edges of T from seedless grape vine to plant is in every credulous extension, 
so no such path can be in the “ideally skeptical extension.” Thus every path-based approach to 
skeptical inheritance wiU always be either unsound or incomplete with respect to ideally skeptical 
inheritance. 


Theorem 6 Any path-based inheritance theory will be either unsound or incomplete 
for ideally skeptical inheritance; the intersection of credulous extensions is not a path- 
based notion. 

Proof: A path-based theory insists that admissible conclusions are only those 
supported by admissible paths. If a path-based theory supports the conclu¬ 
sion seedless grape vine—yplant, it must admit at least one path that supports 
seedless grape vine—^plant. But the only paths that support seedless grape vine—^plant 
are 

seedless grape vine • grape vine • fruit plant • tree • plant 


and 

seedless grape vine • grape vine ■ vine • arbor plant • plant 

Neither of these conclusions is in every credrilous extension. A theory accepting either 
of these conclusions is therefore unsound for ideally skeptical inheritance. Alternately, 
a path-based theory can reject both of these (unsound) paths. However, the theory 
then accepts no path supporting the conclusion seedless grape vine-*plant, so it cannot 
accept that conclusion. Since that conclusion holds in every credulous extension, such 
a path-based theory is incomplete for ideally skeptical inheritance. 


This theorem deserves a few remarks. The first is that its proof depends only on the definition 
of a path-based theory and not on any partictdar properties of any individual path-based theory. 
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Therefore, it applies to the class of path-based theories as a whole. The second is that the hierarchy 
Ft does not involve specificity. It is therefore independent of any choice of specificity criterion, and 
holds for all such criteria (assiuning that no specificity criterion woidd resolve diamond ambiguities). 

This restdt demonstrates that we can only compute the always-true inferences by, in effect, 
reasoning about all of the credulous extensions. Fortunately, in acyclic hierarchies, such reasoning is 
tractable. Corollary 5.3 establishes that a conclusion holds in the intersection of preferred credulous 

extensions (of F w.r.t. a) whenever |aJo“ (resp. Ia]a“) is valid. In section 5, we demomnstrated 
that constructing —eUminating specificity—requires polynomial time. Kautz and Selman [21] 
describe a polymonial time procedure for computing the validity of a label (without specificity). 
By applying Kautz and Sehnan’s algorithm to S^, we can compute the intersection of preferred 
credulous extensions—ideally skeptical inheritance—in polynomial time. 

Corollary 6.1 (Complexity of Skeptical Inheritance) 

Ideally skeptical inheritance—computing the intersection of preferred credulous 
extensions—is 0{n^) 

Proof: By application of Kautz and Sehnan’s NORMAL-UNARY-SKEPTICAL [21, 
p. 196] to the result of our COMPUTE-SPECIFICITY-EXTENSION (section 5). The 
complexity of the algorithm follows directly from theorem 3 and Kautz and Selman’s [21, 
theorem 9]. Its correctness follows follows from that theorem and our corollary 5.3. 


8 Off-Path Inheritance 

The inheritance theory presented above uses a specificity criterion called on-path preemption. In 
this type of ambiguity-resolution, an edge is inadmissible if every non-redimdant admissible prefix 
contains a preemptor. In this section, we consider an alternate specificity criterion; that of off-path 
preemption. In off-path preemption, an edge is inadmissible if any admissible prefix contains a 
preemptor. 

The terms on- and off-path preemption were popularized by Touretzky, et al. [41]. On-path 
preemption appeared first in Touretzky’s work on inferential distance [39, 40]. Off-path preemp¬ 
tion is described in a credulous version by Sandewall [32],^^ in an ambiguity-blocking skeptical 
version by Horty, et al. [18], and in both ambiguity-blocking and ambigidty-propagating versions 
by Haugh [16]. 

Previous comparisons between on- and off-path preemption have resorted to arguments about 
the correct semantics of hierarchies with the topology of Fg. The difference is reflected in the 
hierarchy of figure 13 In Fg, the edge b • -le preempts the inference a-^e —barring both a-b - d - e, 
and a - C'd ■ e. On-path preemption allows a—*e, since a • c ■ d - e (as well as a-/^e, since a • 6 • -le). 
These arguments, based on the “intuitive” interpretation of Fg with various names assigned to its 
nodes, are nothing more than ad hoc attempts at proof-by-example. 

We have argued that our approach to inheritance makes more principled comparison possible. 
In particular, by isolating the preemption strategies from the underlying theory, we can compare 
these criteria directly. In this section, we present the same approaches to off-path preemption as 
we have described for on-path, above. At the end of this section, we show that the principles 
brought out by analyzing the two types of inheritance within our framework can be constructively 
compared, and give some opinions as to the relative merits of on- vs. off-path preemption. 

’’Sandewall’s notion of extension differs significantly from ours: his extensions are actually expansions a la Touret¬ 
zky, and are limited to preferred expansions at that. 
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Figure 13: On- vs. ofF-path preemption. 

Path-Based Definition The ofF-path definition of admissibility is: 

An edge v • x is ofF-path adnaissible in F w.r.t. a if no truly imambiguous ofF-path admissible 
prefix a • Si • • • Sn- V, contains a preemptor of t; • a; (resp., v • -i®). 

The definition of preemptor remains the same. Because ofF-path preemption says that no 
(unambiguous) path through v to a; may contain a preemptor of v • (- 1 ) 0 ;, this definition does not 
need to explicitly exclude redimdant paths. 

We say that T ofF-path supports a-^x (resp., a-/^x) if there is some sequence of ofF-path admis¬ 
sible edges a - Si - • • Sn - X (resp., a ■ si - ■ ■ Sn • “la:) in F w.r.t. a. 

Model-Theoretic Semantics Here, we simply replace the definition of admissibility in the 
model-theoretic semantics of section 4.2 with that of the preceding paragraph. 

If Xo and Y„ are two credulous extensions of an inheritance hierarchy F w.r.t. focus node a, 
then ofF-path specificity prefers to Y^if there are some nodes v and x such that 

1. X^ and Yo agree on all edges whose endpoints topologically precede x, 

2. The edge t; • (- 1 )® is ofF-path inadmissible in F w.r.t. a, and 

3. Yo contains that inadmissible edge. 

4. X^ does not contain it. 

The model-theoretic semantics for credrilous extensions remains as described in section 4.1. 
Minimal extensions under this ordering are the ofF-path preferred credulous extensions of F w.r.t. 
a, and their models axe the off-path preferred models of F w.r.t. a: F ofF-path supports an inference 
iff that inference is entailed by some ofF-path model of F w.r.t. its focus node. By changing specificity 
criteria, we obtain different conclusion sets and correspondingly different preferences over credulous 
extensions. In general, it should be possible to obtain these results using a preemption strategy 
corresponding to any upwards theory of inheritance.^^ 

‘■•Because the definition of credulous extension is upwards, the approach presented here does not lend itself directly 
to the analysis of downwards inheritance theories. 


e 
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Computing Specificity The algorithm for computing the specificity extension of a hierarchy 
w.r.t. a focus node can be adapted for off-path preemption; 


COMPUTE-OFF-PATH-SPECIFICITY-EXTENSION (F, a) 
Let contain the a-reachable nodes of F, and no edges. 
For each node x in n^,in topological order 
Add edges v • (- 1 ) * from F to 


; will be the 
; off-path specificity extension 
; ofT w.r.t. a. 

; From a to ...: 

; Restore x-edges 


For each edge v ■ x (resp., v ■ -■ ») in 0^, in reverse topological order ; 
For each potentially preempting edge w • x (resp., w • *) in ; 
If w is positively but not negatively a-reachable in 0^ 
and 0^ contains a positive path from w to v ; 

then remove the edge v ■ x (resp., v • -1 x) from ; 


Now weed out 
preempted x-edges: 

...then w preempts v • (->) 
so remove it from 


X 


Return 

Like Sq, contains oidy the (off-path) admissible edges of T w.r.t. a. Computing off-path 
support is reduced to verifying reachability in fl„. The complete procedure rrms in polynomial 
time. 

Labeling Since (1^ ehminates the inadmissible edges of T w.r.t. a, we can use the labels of section 6 
to calculate contingent conclusions and ideally skeptical inheritance, in much the same way as we 
did for on-path preemption. It follows immediately from the properties of Jil„ and theorem 5 that 
|a!]]a“ is satisfiable iff T off-path supports a-^x and lajlo* is valid iff a-^x is an ideally skeptical 
conclusion of T using off-path preemption, (resp., |«]]a“ anda74a:). 

On- or Off-Path? By defining off-path preemption in this framework, we can compare its under¬ 
lying assumptions to those of on-path preemption, presented above. By examining the differences 
in preference criteria, we see the principles behind these two types of reasoning: 

On-path preemption: an edge is inadmissible if every (non-redrmdant) admissible prefix 
contains a preemptor. 

Off-path preemption: an edge is inadmissible if any (unambiguous) admissible prefix 
contains a preemptor. 

That is, off-path preemption replaces the existential quantifier in the on-path definition of admis¬ 
sibility with a universal. 

Let < 1 , ...,t„ be many types of ts, each differing from the typical t in specific ways. For example, 
t might be birds, and the ti might be flightless birds, tiny birds, songbirds, etc.. Each of these 
categories inherits most of the default properties of birds, but overrides some particular default. 
Now, if some particrdar bird inherits from several of these t,, what are its expected properties? 

Off-path preemption says that a particrdar bird is atypical for a particular default if it is a 
member of any ti that overrides that default—e.g., doesn’t fly if it’s a penguin —even if it’s a 
member of many other subclasses— songbirds or even tree-dwelling birds —that are normal for the 
default. In other words, off-path preemption overrides default behavior whenever possible. 

In contrast, on-path preemption remains agnostic about overriding defaults. If something is a 
member of an atypical subclass ti, it certainly may be atypical for the corresponding property of t: 
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penguins may not By. However, if it is also a member of tj which does not override that default—a 
songbird or tree-dwelling penguin —then it may arguably possess default behavior—it may be a 
dying penguin, after all. 

The reason for defining t\,...,tn as subtypes of t is generally to enforce certain distinctions 
between the t,s and typical ts: subclasses are not the same as their superclasses, or we wouldn’t 
have defined the subclass in the first place. The argument in favor of olT-path reasoning says that 
anything which is a tj should probably be assumed to be at least as unusual as tjS. Off-path 
preemption’s strategy is to assume maximal atypicality. In contrast, on-path preemption concedes 
that there are arguments both ways. One argument relies on the default behavior of subclasses, 
while the other depends on the explicit information about atypicality. On-path inheritance maJces 
no distinction between these, while off-path inheritance favors the explicit overriding of defaidts. 
If we are confident that our hierarchy is fully fleshed out and contains aU relevant information, it 
may well be that off-path preemption provides a more appropriate description of our intuitions.^® 

9 Comparisons with other Inheritance Theories 

Previous attempts to compare existing inheritance theories have proceeded largely on the basis 
of analysis of specific results on particular examples. Because existing theories either translate 
inheritance hderarchies into distinct target logics, or bury the ambiguity-resolving strategies (such 
as preemption) in complex path-based or translation criteria, little if any principled analysis has 
been possible. Touretzky et al. [41] attempt to overcome this difficulty. They delimit a space of 
existing and potential inheritance theories, identifying several dimensions along which these theories 
vary. Nonetheless, this work stiU relies largely on examples rather than principles, and does not 
separate ambiguity-resolution from the space over which the ambiguities arise. 

A second attempt to unify and compare existing inheritance theories is due to Haugh [16]. 
Haugh translates inheritance theories into circumscriptive meta-theories. His theory is modular 
with respect to the preemption axioms used, and indeed he presents preemption axioms for theories 
of credulous inheritance, skeptical inheritance both as presented by Horty, et al. [18] and in a 
corresponding ambiguity-propagating form, and various types of off-path preemption. However, 
he does not distinguish a set of interpretations corresponding to these preemption axioms, making 
it difficult to identify the intuitive principles to which his various axioms correspond. Haugh’s 
confotmding of meta-strategies for addressing ambiguity—credulous versus skeptical reasoning— 
with particular ambiguity-resolving heuristics—on- versus off-path, etc. —is a further symptom of 
this failure to identify the underlying space over which ambiguity quantifies. 

The numerous preemption strategies in the literature result from differing interpretations of 
the notion of “subclass,” or specificity. The underlying principle is that more specific information 
should override more general. But there is little agreement on a single definition of “more specific” 
at the level of the nodes and edges of an inheritance hierarchy. In the body of this paper, we 
present on-path preemption, which is conservative with respect to the acceptance of abnormality. 
In section 8, we present off-path preemption, which provides a more promiscuous approach to 
abnormality in inheritance. 

The different treatments of true ambiguity are reflected in the debate over skeptical inheri¬ 
tance. In section 7, we describe previous approaches to skeptical inheritance, and demonstrate the 
shortcomings of path-based skeptical approaches. 

^®An anecdotal aside: I was particularly surprised to reach this conclusion, myself. I’d been a long-standing 
opponent of off-path preemption, but when I’d gotten the principles worked out, I have to admit that I found myself 
convinced. I present this as anecdotal evidence that understanding the underlying principles really does help sort out 
the “right” intuitions—LAS 
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By making various choices on the skeptical/credulous spectrum, and in on- vs. ofF-path pre¬ 
emption, we can describe many of the existing theories of inheritance. For example, SandewaU’s 
theory [32] is ofF-path and credulous; Horty, et a/.’s [18] is ofF-path and ambiguity-blocking, Touret- 
zky’s original theory [39, 40] is a downwards version of the on-path creduous theory presented in 
sections 3-5. 

By describing other inheritance theories in the framework presented here, we obtain not merely 
sotmdness and completeness results, but a more profound understanding of the underlying princi¬ 
ples. This allows us to make comparisons based not on ad hoc examples, but on intuitions that 
underly them. 


Acknowledgements 

This work was completed with the help, advice, and support of many people. In particular, I 
would like to thank my dissertation supervisor, Leora Morgenstern; my readers, Eugene Charniak, 
Tom Dean, and Drew McDermott; Sanjaya Addanki and IBM; Ken Bayse, Mark Boddy, Robert 
Goldman, and Mark Johnson; David Etherington, Jeff Horty, Henry Kautz, Ron Loui, Bart Selman, 
Lokendra Shastri, Rich Thomason, and David Touretzky; the anonymous reviewers for Artificial 
Intelligence] and my family. 

A Proofs of Theorems 

The proofs of inheritance theorems are given for the positive cases only (e.g., |> a—^x)] the 

proofs of the negative cases (e.g., |> a-/^x) are similar. Many of these proofs are inductive. The 

following two definitions provide the basis for these inductive proofs. 

Definition: A node « G Vp is a leaf of F if a; has no children in F, i.e., O’osr(y) = Qieg-[<(y) = 0. 


Definition: The depth of a node a: in a hierarchy F, (J(a:,F), is defined recursively: 

1. If a; is a leaf of F, ^(a:,F) = 0. 

2. If X is not a leaf of F, ^'(a;,F) = 1 -i- max({^(u;, F) | w G Q)osj;{x) U (he3r{*)}) 


A.l Credulous Extension Semantics 

Theorem 1 (Soundness and Completeness for Credulous Extensions) 

Let F be an inheritance hierarchy, with a,x G Vp • Let X^ be a credulous extension of 

F w.r.t. a, and let X^ be the propositional theory corresponding to X^. The following 
are equivalent: 

1. X„]>o-+a: (resp., a-fi>x). 

2. X is positively a-reachable in X^(resp., negatively a-reachable). 

3. X^ h £ (resp., ^x). 

4. X^ 1= X (resp., -^x). 
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Proof: 

1 2: By definition, a hierarchy |> a-^x iff x is positively a-reachable in by an 
admissible path; but since a credulous extension is unambiguous, every path is 
admissible. 

2 3: =^1 Assume that x is positively a-reachable in X^, i.e. (3 si • • • s,^) a ■ si • • • 

Sn ■ X E E-jrr. Then 

■^tt 

a A (oDs'i) A /\ (siDSi+i) A (s„ D S) (l) 

l<i<n—1 

is a sub-theory of X^; since a theory validates any subtheory, X^ h (1) and its 
components. So X^ h a; X^ h 2 D therefore X^ h si; similarly X^ b Si D 52? 
so X|[ h S 2 ; etc. So X^ h x. 

<=-. Assume x is not positively a-reachable in X|[, but X^ h x. Since X^ h x, 
X^ U {~r} h ±. In particular, X^ U {~r} b ~a; and by the deduction 
theorem, X„ b ~ r D ~ 2. This is just 2 D r Since X„ is a conjunction 
of clcius^s of tho form sD (~)t (and the singleton 2), X^ b 2 D r means th?.t 
either 2 = 2 or there is some conjunct 2 D Ji in X„ such that X^ b siDx. 
By a similar argument, we can show that either si = 2 or there is some S 2 
such that si D S 2 is in X^ and X^ b S 2 15 ~2, etc., so that there must be 
a chain of conjuncts 2 D ?i, S"i D S 2 ,..., D D ~2 in X^. Since every 
conjunct of X^ corresponds to an edge of E^r , this implies a sequence of edges 
a • Si • • • Sn • X —making x a-reachable in X„; contradiction. 

34: This follows from the soundness and completeness of propositional logic: a 
formula is derivable from a propositional theory iff every model of that theory 
entails that formula. 


A.2 Soundness and Completeness 

The following lemma is used in the proof of several theorems, in this section and elsewhere. It says 
that any unambiguous a-connected subhierarchy of T can be extended to make it Tna.xima.1 — i.e., a 
credulous extension of T w.r.t. a. 


Lemma 2.1 (Extension Construction) 

Let r be an inheritance hierarchy, and let {vj • Xi} be an unambiguous a-connected 
subhierarchy of T. Then there is an extension X„ of T w.r.t. a containing {vi • (-i)a;i} 
(i.e. {vi ■ (-.)a:i} 6 E^v). 

Further, if {uj-(- 1 ) 3 : 1 } are all admissible in T w.r.t. a, then there is a preferred extension 
of r w.r.t. a containing {vi • a:,}. 

Proof: Construct X^ = Extend{{vi ■ a;i},r ,a) as follows: 



L. A. Stein 


Resolving Ambiguity in Nonmonotonic Inheritance 


30 


1. Let {vi ■ (-')a:0 G E^r. 

2. For each node x, in topological order, add the edge v • {-')x G Ep to E^r if 
(a) V is positively a-reachable in Extend{{vi • a:j},r,a) (as constructed so far), 

(h) V ■ (-i)a: is admissible in F w.r.t. a, and 

(c) adding v ■ {-<)x won’t make Extend{{vi • a:j},r,a) (as constructed so far) am¬ 
biguous. 

By construction, = Extend{{vi ■ (-i)a;i},r,a) is a credulous extension of F w.r.t. 
a: it is unambiguous and o-connected, and any edge that could be added without 
contradicting one of these two properties has been. 

Further, if every edge in {u,- • (-i)®,} is admissible in F w.r.t. a, we claim that = 
Extend{{vi • ®i},F,a) is a preferred credulous extension of F w.r.t. a. 

Let 7 ^ X^ be a credulous extension of F w.r.t. a. Assume by way of contradiction 
that ■:< X|[. Then there are some nodes G Vxj such that 

1. X^ and Y„ agree on all edges whose endpoints topologically precede t in any 
topological order, 

2. s • (-i)t is inadmissible in F w.r.t. a, 

3. X^ |> a • Si • • • Sto • s • (-i)t, (m > 0), and 

4. Y^ [2$>o- Si • • • • s • (-.)t 

If s • (-i)t is inadmissible in F w.r.t. a, then either 

1. s • (-i)t is in {vi • (-i)a:j}. But then it must be admissible, since {vi • (-i)®,} is 
admissible in F; or 

2. it was added during the construction. But then it is admissible in F w.r.t. a, by 
condition 2b. 

So X^ does not contain an inadmissible edge, and it is is therefore a preferred extension 
of F w.r.t. a. 


The foUowing lemma says that every edge of a preferred credulous extension of F is admissible in 

F. 


Lemma 2.2 Let F be an inheritance hierarchy, with a G Vr? o,nd let X^ G 
Tref(T, a) be a preferred credulous extension o/F w.r.t. a. Then every edge v ■ (-i)® in 
X„ is admissible in F w.r.t. a. 

Proof: Assume that there is an edge in X|[ that is inadmissible in F w.r.t. a. There must 
be some inadmissible edge, say v-x, for which every edge whose endpoints topologically 
precede ® is admissible. Since v-x G E^r, there must be some path a-Si---Sn-v-x G ExGa 
(a credulous extension of F w.r.t. a is a-connected). Certainly, this path is not admissible 
in F w.r.t. a (else v • x would be admissible in F w.r.t. a); but by hypothesis, u • ® is 
the only inadmissible edge in it (since all other edges topologically precede v ■ x). So 
a • Si • • • • n is admissible in F w.r.t. a. Consider Y^ = E®tend(X'[|a,,F,a), where X^l* 

is 

{b ■ (-i)q I b • {-i)q G E^r and q topologically precedes ® in F} 
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Certainly is a credulous extension of T w.r.t. a (by lemma 2.1, since X^la. is an 
unambiguous subhierarchy of F w.r.t. a). Further, X^: 

1. X^ and Y^ agree on all edges whose endpoints topologically precede x, 

2. u • a; is inadmissible in F w.r.t. a, 

3. X^ |> a • Si • • • Sn • u • a:, and 

4. YJ a • Si • • • Sn • V • X. 

But this means that X^ ^ Vref(V, a); contradiction! 


Theorem 2 (Soundness and Completeness) 

Let F be an inheritance hierarchy, with a,x £ Vp, and let 'Pref{T, a)be the set of 
preferred extensions of F w.r.t. a. Then F |> a^x iff there is some preferred extension 
X^ G Vref{T,a) such that X^ |= x (resp., a-f^x and 

Proof: 

This follows directly from lemma 2.1 and theorem 1, conditions 1 and 4: If F |> a-^x, 
then there is an admissible path o-si •--Sn-a: in F. So—by lemma 2.1— Extend{{a- 
si,...,Sn • a;},F,a) is a preferred credulous extension of F w.r.t. a; call it X^. By 
theorem 1, whenever x is positively a-reachable in X^, then X^ |= x. 

<=: Assume that F a-^x, i.e. that there is no admissible path from a to a; in F. Then 
by lemma 2.2, any credulous extension containing such a path—and hence an 
inadmissible edge—cannot be a preferred credulous extension of F w.r.t. a. 


A.3 Computing Inheritance 

Theorem 3 (Complexity of compute-specificity-extension) 
Constructing is 0(n®) 

Proof: 

We assume that an inheritance hierarchy F = (yr,Er) is represented as: 

Vp is an array [integer] of nodes in topological order 
Ep is represented by two arrays, 

Ep"^ and Ep“, both array [node xnode] of boolean 


COMPUTE-SPECIFICITY-EXTENSION (P, a) 

R : array [node xnode] of boolean; 

S* : graphs with structure equivalent to P 
unreachable : array[node] of boolean 

For V := 1 to |Vp| 

For X := 1 to |Vr| 
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•E'sr'^[v,a] := false 
Ej;r~[v,a] := false 
f?[r, a] := false 

n := TOPSORT-REACHABLE-SUBSET (P.a.S^) 

For a := 1 to n do 
For V 1 to n do 
If Er+[VrH, Vr[a]] 

•Esr'''[Vsr[v], Vsr[a]] := true 

IfEr"VrW” VrWf 

Esf [VsrH, yEr[a]] := true 
For V := (x — 1) to a do 
I{E^r + [VsrJv],V^rJx]] 

For i := 1 to n 

unreachable [i] false 

S* := REMOVE-NEGATIVE-PREEMPTORS (S^,u,a) 
If not (POSITIVELY-REACHABLE? (E*, o, v)) 
Esf'^[VsrH,ysrH] := false 

IfEsrt^srH.VsrWj 

For i := 1 to n 

unreachable [i] := false 

E* := REMOVE-POSITIVE-PREEMPTORS (E^, v, a) 
If not (POSITIVELY-REACHABLE? (E*, a, n)) 
Esrt^srW, Vsr[a]] - false 
For p := (a — 1) to a do 
If Esr + [Vs;H,V-sr[a]] 

If REDUNDANT? (E^, a, p, a) 
jR[p, a] := true 
Es^^[Pi®] := false 
For p := 1 to ra do 
For a := 1 to n do 

®s£'''b.®] — Esr'''[p,a] or R[p.*] 

Return E^ 

Auxilliary code may be found in figure 14. 


The complexity of this algorithm is 0(t-|-+ n^(p-f 6) + n^r), where n is the 
number of nodes in the hierarchy (|Vri)» t is the computational complexity of 
a caU to TOPSORT-REACHABLE-SUBSET, p is the complexity of REMOVE-...- 
PREEMPTORS, b is the cost of POSITIVELY-REACHABLE?, and r represents the 
call to REDUNDANT?. 

Examination of the code in figure 14 yields a cost of 0(e) < O(n^) for TOPSORT 
(and hence for TOPSORT-REACHABLE-SUBSET), where e = |Er| < | VrP = this 
is a simiple variant of depth-first search taken from Aho, Hopcroft, and UUman [3]. 
POSITIVELY-REACHABLE is similar, using unreachable[] as mark[] and potentially 
terminating early (before the entire hierarchy has been searched) if the first if term 
returns true. Its complexity is also 0(e), since it too searches each edge at most once. 
POS-REACH-W/O-NEGS? foUows POSITIVELY-REACHABLE; the test FOR n := 1 
to (x — 1) is performed at most once per node, the complexity of POS-REACH-W/O- 
NEGS? is 0(e -f n?) or simply O(n^). REDUNDANT? is therefore O(n^), calling POS- 
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TOPSORT-REACHABLE-SUBSET (Pi^, a, Tout) 
; Adapted from [3, p. 222]. 

For i 1 to |Fri„ | do 
mark[i] := false 
i := 0 

TOPSORT (a) 

For j := 1 to i do 

:=TST[i + 1 - j] 

Return i 


TOPSORT (o) 
mark[a] := true 
For X := 1 to |Vr(„| do 
If mark[iB] = false then 
If W, Fr,„H] or E^JVr.Ja], Vr.„ W] 

then TOPSORT (®) 
i := i + 1 
TST[*] := a 

POSITIVELY-REACHABLE? (E*,6,*) 

; assumes an external array unreachable[integer] 

; of boolean, initialized to false 
If 6 = a 
Return true 
Else 

If unreachable [6] 

Return false 
Else 

lib > X 

unreachable[6] := true 
Return false 
Else 

reached := false 

For V := ie to (h + 1) 

If not (reached) 

If Es*-*'[Vs*[h], Ys*H] 
reached ;= 

POSITIVELY-REACHABLE? 
unreachable[v] := not (reached) 

Return reached 


REDUNDANT? (E^,6,a) 

For i := 1 to n 

unreachable [i] := false 
For V := {b + 1) to (as — 1) 

If POS-REACH-W/O-NEGS? (S^, h, t,) 
and POS-REACH-W/O-NEGS? (S^, r;,*) 
Return true 
Return false 


REMOVE-NEGATIVE- 
PREEMPTORS (E^, r;,*) 

S* := (Vsr>Esr) 

For s 1 to n 

ifE^rc’^sfW-'^sjW] (***) 

and not Esr^[Vj 3 r[s], Vsr[®]] 

For t := 1 to n 

IfEsr + [VsrW,VsrW] 

Es*+[Vs*W,Ts*[t]] - false 
If Egr [ Vsr [s], Vjjr [t]] 

En* W) Vs*[t]] — false 
IfEsr + [Vsr[t],VsrW] 

+ Vs*W] := false 

IfEsr-[VsrM,VsrW] 

Es* - [Vs* W, Vs* [s]] := false 

Return S* 


REMOVE-POSITIVE-PREEMPTORS is identi¬ 
cal save that line (***) reads 

IfEsrnVsrW,Vsr[*]] 

and not Esr^VsrW, Vsr[a]] 

POS-REACH-W/O-NEGS? (E^, b, v) 

; Like POSITIVELY-REACHABLE, backwards, 
; but with the extra constraint that none of the 
; intermediate nodes can be negatively a-reachable 
lib = X 

Return true 
Else 

If unreachable [as] 

Return false 
Else 

Ifh > ® 

unreachable [as] := true 
Return false 
Else 

For n — 1 to (® — 1) 
IfEsr-[Vsr[n],Vsr[as]] 
unreachable [as] := true 
Return false 
reached := false 
For v := (as — 1) to 6 
If not (reached) 

If Esr'''[Vsr[v], Vsr[*]] 
reached := 

POS-REACH-W/O-NEGS? (E^,6, v) 

unreachable[v] := not (reached) 
Return reached 


Figure 14: AuxiUiary code for COMPUTE-SPECIFICITY-EXTENSION 
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REACH-W/O-NEGS? twice (0(2n^) = 0{n^)) for each node between b and x. Finally, 
REMOVE-...-PREEMPTORS is simply O(n^). 

The total complexity of COMPUTE-SPECIFICITY-EXTENSION is therefore 
0(n^ -f -f n?{n? + n^) + n^n^) or O(n^). 


Theorem 4 (Correctness of compute-specificity-extension) 

Let r be an inheritance hierarchy, with a 6 Up; let be the specificity extension 
of r w.r.t. a. Then 


Ejjr = {u • (-i)a;|n • (-i)® admissible in Tw.r.t. a} 

Proof; The proof proceeds by induction on the length of the longest path from a to u 

in r. 

Base Case: Consider the case in which the edge a-x E Er is the longest path from a to 
a: in r. In this case, P |> a-^x —because a • a: is not redundant (else there would be 
a longer path from o to a; in P) and contains no preempting intermediary—and x 
is positively a-reachable in —again, x has no a-reachable negative preemptors 

inP. 

Induction Hypothesis: Assume that for every node a; € Up with the longest path from 
a to a; in P of length < k, v ■ (-i)a; is admissible in P w.r.t. a iff u • {-i)x E 

Induction Step: Consider a node x with the longest path from a to a:, a • sj • • • s„ • a;, 
n = k. Claim: an edge u • a: is in iff it is admissible in P w.r.t. a. 

Let u • a: be admissible in P w.r.t. a. Then there is some non-redimdant sequence 
of admissible edges a • t\ ••• tm • v ■ x E Ep containing no preemptors of s„ • y. 
Further, m < k (since the length of the longest path from a to a: is ^ + 1, and the 
length of this path is m -f 2). So a • • u has length at most k, and by the 

induction hypothesis, since it is composed of edges admissible in P, it is entirely 
contained in S^. Is u • a: in S|[? Assume not. Then it must be the case that if we 
REMOVE-NEGATIVE-PREEMPTORS from a; is no longer POSITIVELY- 
REACHABLE?. But none of o, ti, ...tn, u is a negative preemptor of x, so the path 
a • ti • • • tm ■ V • X remains in S* and so in S^. Contradiction. 

Let u • a; be in S^. Then by the induction hypothesis, every positive path from 
a to u in is admissible in P w.r.t. a (since the length of the longest path 
to V is at most k). Certainly, there must be such a path, or v would not be 
POSTIVELY-REACHABLE? and v-x would not be added to E^r. Further, there 
is such a path with no redundant edges and no preemptor of x, since any edge that 
is REDUNDANT? is temporarily removed from and we further REMOVE- 
NEGATIVE-PREEMPTORS before determining that v remains POSITIVELY- 
REACHABLE? (else v • x would not be in S^). So there is an admissible positive 
path from a through u to a:; and u • a? is admissible in P w.r.t. a. 
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Corollary 4.1 Let F be an inheritance hierarchy, with a G Vr- Let Vref{T, a) 
be the set of preferred credulous extensions of T w.r.t. a and let be the specificity 
extension of F w.r.t. a. Then E Pref(r,a) iff is a credulous extension o/ 
w.r.t. a. 


Proof; 


>i Consider E ■Pre/(r, a), a preferred credulous extension of F w.r.t. a. Claim: X^ 
is a credulous extension of 

Xg is a subhierarchy of By lemma 2.2, every edge of X^ is admissible in F 
w.r.t. a. By theorem 4.2, every admissible edge of F w.r.t. o is in E^r; so 
Evr C Eyr. 

■^a 

X^ is unambiguous: This follows directly from the fact that X^ is a credrdous 
extension of F w.r.t. a 

XI is maximal: Imagine that there is an edge r ■ a; in that is not in X^. 
Certainly, this edge is in F; but X^ is maximal w.r.t. F and a. So adding 
V • X would make X^ not a-coimected (and hence an extension of neither F nor 
Sl) or ambiguous w.r.t. a (with similar result for E^) or not preferred. By 
theorem 4.2, since this edge is in S^, it is admissible in F w.r.t. a. So adding 
it to Xl would not prevent X^ from being a preferred credulous extension of 
F w.r.t. a. Therefore, no such edge exists. 


■ p p 

Let Xo“ be a credulous extension of w.r.t. a. Claim: X^ E 'Pre/(F, a). 


Certainly, every edge of Xa“ is in S^, so by theorem 4.2, every edge of xl“ is 
admissible in F w.r.t. a. By lemma 2.1, Xa“ must therefore be contained in a 
preferred credulous extension of F w.r.t. a; call it X^. Let u • a: be an edge of Xl 
that is not an edge of Xa“, i.e., v-x E E^r —E jjr. By lemma 2.2, v-xis admissible 

in F w.r.t. a; by theorem 4.2, this means that it is in Sl. Since it is not in Xa“, 

adding it to Xa“ would make X<x“ ambiguous—but then X; must be ambiguous— 
or not a-connected—but then X^ must not be a-connected. So no such edge can 

exist, and E^r - E = 0, i.e. X^ = Xa“; and Xa^ = X^ G Vref{T, a). 

“ x„ “ 


.sr 


Corollary 4.2 Let F be an inheritance hierarchy, with a E Vy. Let E^ be the 
specificity extension of F w.r.t. a. Then F|>a->a: iff x is positively a-reachable in 
E\(resp., a-/*x and negatively a-reachable). 

Proof: 

K F |> a—^x, then there is some (non-redundant) sequence of admissible positive 
edges a • si • • • Sn • a: in F (containing no preempting intermediary). Since each of 
these edges is admissible in F, by theorem 4, each of these edges is in Si; so X is 
positively a-reachable in EI. 

<=i If EI does not contain a positive path from a to a:, then (by theorem 4) there is no 
sequence of admissible edges from o to a: in F, so F [2^ a-^x. 
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Corollary 4.3 (Complexity of Credulous Inheritance) 

Deciding whether F |> a^x is 0(n®) (resp., a-f=>x). 

Proof: By corollary 4.2, F |> a-^x iff x is positively a-reachable in By theorem 3, 
finding is 0{n^). Determining reachability can be accomphshed by depth-first or 
breadth-first search, either of which is 0{e) < 0{n^) < 0(n®); since the two passes are 
independent and sequential, the total complexity is 0{n^). 


A.4 Labels 

The next lemma says that if a; is (positively or negatively) a-reachable, then [[®la=(~|®lo)- 

Lemma 5.1 Lei F be an inheritance hierarchy, with a,x E Vr- Let £(F, a) be the 
ATMS labeling ofT w.r.t. a, with [«Ia, I^']^ E £(F,a). Then 

I. I*E = (~I»C) A (I<io.r(*)E V [<3.esr(«)E) 

PE = (~PE) A (I9«.r(»)E V Ifte!,r(»)E)- 

Proof; 


I^o«r(®)l« 

[[Che<?r(a;)l‘' 

X 

W. 

(~[[®la) A (IC 2 >‘>Sr(«)la V Iche3r(®)la) 



± 

± 


± 


T 

± 


± 

T 

± 



± 

T 

T 

± 


T 


± 

T 

T 

T 


T 

T 

T 

T 

T 

± 

± 


T 

T 

T 

T 

T 


Similarly, 


la>osr(«)Ii’ 

I(3ie</r(a;)l^„ 

X 


(~[[®lo) A (l[0>osr(®)la V Idiesrr(a;)]^) 

± 


± 


1 

± 

± 

T 



± 

T 

-L 

T 

T 

± 

T 

T 

T 

T 

T 


± 

± 


T 


T 

1 

J- 

T 

T 

± 

T 

T 

T 

T 

T 

± 
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Theorem 5 (Correspondence Theorem) 

Let r be an inheritance hierarchy, with a,x G Vr- Then there is a correspondence 
between the set of credulous extensions of F w.r.t. a, and the truth-assignments to 
the free variables in the labels of T w.r.t. a, such that the truth-assignment assigns 
I®la = [T] iff the corresponding extension supports a—*x (resp., |«]]„ and a-J^x). 

Proof; 

Let T be the set of all possible truth-assignments to the variable corresponding to the 
nodes of Vr- If ^ G T is a truth-assignment to the variables corresponding to Vr» 
and fa:]o is a propositional formula over these variables, then T(|a;]a) is the truth-value 
assigned to the formula |a:|^ under T in the traditional sense. 

Let {X„} be the set of credulous extensions of F w.r.t. a. 


Truth Assignments to Credulous Extensions: 

Define -.T {X^} as 

I -5 • G Er or t • (^)v G Ep} 

Kir) = {^•feErir(MD = r(|t£) = [T]} 

U{s • -it G Er I T'([sl^) = [T] and TdUl^) = [T]} 

We claim that v?(T) is a credulous extension of F w.r.t. a. 

1. Certainly, v?(T) is a subhierarchy of F. 

2. <p{T) is unambiguous: By lemma 5.1, the formtda ItJa A p]]|[ is unsatisfiable: 

= IiKA((~ItK)A(la> 0 .r(i)Ev[(he,p(t)O 

= (I<la A (~!If la)) A (I(po5p(t)K V I(he5p(t)I^) 

= ± A (|[<Jo«r(01a V l[<3lC5ip(t)l^) 

= ± 

So it cannot be the case, for any Si,S 2 ,t, that both Sj • t and S 2 ■ -it are in E^( 2 -). 

3. <p{T) is maximal: Assume by way of contradiction that there is some edge 5 -(-')t G 
Ep - E^( 7 -), and (^^( 7 -)? ^<p{T) U {s • {~i)t}) is unambiguous and a-connected. Then 
either r(|sK) 7^ [f], or T(jtl^) (resp., T(pir))^ [T]. 

T(|sl^) ^ T; Then s is not positively a-reachable in ^(T), and adding s • (-i)t 
wotdd not preserve a-connectedness. 

^(plo) (resp., ^(Pl^))?^ T: But TdtJ^) is either [T] or [±]—T assigns a 
boolean truth-value to every variable corresponding to a node in Vp, and 
PIq is a propositional formula over these variables. So T(p J^) = [J_]. But 

rdt© = (rdo-o^rWE) A (~r(i(3,e3r(()]D)) 

V(T(I(3».r(i)E) A T(Iaiesr(()E) A T(i)) 

= r(i(i«,.r(()E) A ((~r([a.9r(())J)) v r(i)) 
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In particular, 


r(iq.«.r(<)K) = [J-l 

This means that Vp G (posi'{t), T{|p]^) = [±]. In particular, T(|[sJ^) = [i.] ^ 
[T], and s is not positively a-reachahle in ^(T), so adding s ■ t would not 
preserve a-connectedness. By a similar argument, T(p~|]^) ^ [T] means that 
T([[(5ie£fr(t)]a) = [i-]; ^([ 5 ]^) = [J_] ^ [T]; s is not positively o-reachable in 
Vp(T); and adding s ■ -it wotdd not preserve a-coimectedness. 

Then T(|a;]g) = [T] iff a: is positively a-reachable in p(T), so by theorem 1, T(|a:|^) = 
[T] iff (p{T) |> a—^x. 


Credulous Extensions to Truth Assignments: 

Define V’: > T as 

T{x) = I 

Then (V’(Xo))([[a:|^) = [T] iff |> a-^x. The proof proceeds by induction on <^(a:,r): 

Base Cases: If a: is a leaf of T, then either 

1. a: = a. Then |>a-^a. Also, |aK = [T], so (V’(Xn)(l[a:la) = (^(Xa)){[T]) = 
[T], or 

2. a; a. Then rl^a:->a, and Ia|^ = [T], so (V'CX^KWD = (V’(X0)([-1-]) = 

w- 

Induction Hypothesis: Assume that, for aU nodes a: G Vr with ^(a:,r) < n, 

WXD)(WD = (T]iiFXj|>a^». 

Induction Step: Let y 6 Vxr, — n. Then 


(«XD)(M^) = ((t(>(xr))([(3».r(i/)K) A (~(V-(xr))(|[ft.sr(!,)E))) 

V((V’(X^))(|[0?osr(y)lO A (V'(XO)(I<3ie5r(y)l^) A (^(X^))(p)) 


if X^ |>a—>a: 
if X^ lj^>a^a: 


Since Vw G U Qtegj^{x), ^(ta,r) < n, the induction hypothesis applies and 

(^(XO)(Ma) = [T] iff X^ l>a-^-w. Now, either 

1. X„|>a-^t/. Then y is positively a-reachable in X'^, but not negatively a- 
reachable: 3p G (po5r(y), X^ |> a^p, but Vn G Qieg^{y), X„ a^n. Then 
3p G (i>osriy), (^(X^))([bK) = [T], but Vn G (hegr{y), (V’(XO)(|In]a) = W; 
and (V^(XD)(bE) = [T] 

2. X^ ]f>a-*y. Then y is not positively a-reachable in X^: either y is negatively 
a-reachable, or y is not a-reachable at all. In either case, Vp G iposp(p), 
X^li^>a-^p, and so (V’(X^))([[pE) = [±]. But then (^(X^))(|pE) = [±] as 
well. 
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Corollary 5.1 Let T be an inheritance hierarchy, with a,xE Vr- Then [[a:|^ is 
satisfiable iffx is positively a-reachable in F. (resp., and negatively a-reachable). 

Proof; K |a:]a is satisfiable, then there is a truth-assignment T to the variables cor¬ 
responding to the nodes of F such that T(|a;]g) = [T]. y’(T) is a credulous extension 
of F w.r.t. a such that T(|y|„) = [T] iff <p\t) |> a—>t/; so <p{T) \>a-^x. By theorem 1, 
this means that x is positively a-reachable in and since <p{T) is a subhierarchy 

of F, X is positively a-reachable in F as well. Conversely, if x is positively a-reachable 
in F, then by lenuna 2.1, there is an extension of F w.r.t. a containing a positive 
path from a to x\ by theorem 1, \>a-^x; and is a valuation of the variables 

corresponding to the nodes of F that assigns [[a:|o = [T]. 


Corollary 5.2 Let F be an inheritance hierarchy, with a,x £ Vp, and let be the 

specificity extension of F w.r.t. a. Then [[rja® is satisfiable iffT\>a^x (resp., Irja 
anda-/*x). 

j,r 

Proof: By coroUary 5.1, [[rja* is satisfiable iff a; is positively a-reachable in S^. By 
corollary 4.2, x is positively a-reachable in ifFF |>a— 


A.5 Skeptical Inheritance 

Corollary 5.3 Let F be an inheritance hierarchy, with a,x £ Vr> •md let be 
the specificity extension of F w.r.t. a. Then [[r]^ is valid (tautological) iff a-^x holds 

in every credulous extension of F w.r.t. a, and [rja“ is valid iff a-^x holds in every 
preferred credulous extension of F w.r.t. a (resp., 1®!^ and negatively a-reachable). 

Proof; If [rJo is valid, then every truth-assignment to the variables corresponding to 
the nodes of F satisfies fajJa. In particular, if X^ is a credulous extension of F w.r.t. 
a, then V’(X„) satisfies |a:]^—V’(X^)(I®la) = [T]- But by theorem 5, i/»(X^) assigns 
iKxS)(wD = miffxj |> a—^x. Since the choice of X^ was arbitrary, this holds for 
every credulous extension of F w.r.t. a, and every credulous extension of F w.r.t. a 
supports a-^x. 

Conversely, assume that [a;]^ is not valid. Then there is some truth-assignment T that 
falsifies [[a;]^: T(|a:J^) = [±]. Consider the credulous extension TiT)', by theorem 5, 
(fiT) a^x. So there is some credulous extension of F w.r.t. a that does not support 
a—^x. 

It follows that |x|a“ is valid iff a-^x holds in every credulous extension of w.r.t. a; 
but by corollary 4.1, the credulous extensions of w.r.t. a are precisely the preferred 
credulous extensions of F w.r.t. a. 
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Theorem 6 Any path-based inheritance theory will be either unsound or incomplete 
for ideally skeptical inheritance; the intersection of credulous extensions is not a path- 
based notion. 

Proof in text 


Corollary 6.1 (Complexity of Skeptical Inheritance) 

Ideally skeptical inheritance—computing the intersection of preferred credulous 
extensions—is 0(n®). 

Proof in text 
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